Diese Präsentation wurde erfolgreich gemeldet.
Wir verwenden Ihre LinkedIn Profilangaben und Informationen zu Ihren Aktivitäten, um Anzeigen zu personalisieren und Ihnen relevantere Inhalte anzuzeigen. Sie können Ihre Anzeigeneinstellungen jederzeit ändern.

Ipv6 security attacks and countermeasures in a nutshell

1.226 Aufrufe

Veröffentlicht am

Ipv6 security attacks and countermeasures in a nutshell

Veröffentlicht in: Technologie
  • Als Erste(r) kommentieren

  • Gehören Sie zu den Ersten, denen das gefällt!

Ipv6 security attacks and countermeasures in a nutshell

  1. 1. IPv6 Security: Attacks and Countermeasures in a Nutshell J. Ullrich, K. Krombholz, H. Hobel, A. Dabrowski, E. Weippl SBA Research, Vienna, Austria
  2. 2. Motivation • Variety of sources (RFCs, blogs, …) • Systematization of attacks and countermeasures • Identification of challenges
  3. 3. IPv6 Header Format 0 1 3 4 Tr. Class Flow Label Payload Length Next H. Hop Limit Source Address Destination Address Ver.
  4. 4. Systematization • Vulnerabilities action, object, target, result, origin, and modification • Countermeasures action, object, and activity level • Evaluation on vulnerabilities and adequate countermeasures
  5. 5. Future Challenges • Address assignment and structures • Securing the local network • Reconnaissance
  6. 6. Addressing • Stateless Autoconfiguration Modified EUI-64 format Privacy Extension •DHCPv6 DHCP unique identifier • Manual address assignment
  7. 7. Securing the Local Network • IPsec Bootstrapping problems Manual key assignment • Secure Neighbor Discovery (SeND) Cryptographically Generated Addresses Signation of packets
  8. 8. Reconnaissance • Vast address space • Alternatives DNS querying Messages to multicast addresses Eavesdropping • Active probing still promising Address selection Patterns?
  9. 9. Conclusion • Generation next – generation best? Not less secure than IPv4 Transition technologies • Challenges for the future remain ...
  10. 10. ?

×