Not surprisingly, IPv6 has almost the same set of security problems as IPv4. Even worse, some of the things we’ve already solved in IPv4 (fragmented TCP/UDP headers) haven’t been ported to IPv6, and implementations of IPv6 security features lag far behind their IPv4 counterparts.
The upcoming IPv6 security webinar (register here) describes these problems, and I managed to get the best possible guest speaker: Eric Vyncke (the author of the IPv6 Security Cisco Press book) will tell you all about the IPv6 security features available in Cisco IOS.
Posts
This comment has been removed by the author.
ReplyDeleteYes, it´s sad, on many (edge) switches, "ND snooping" features are easily bypassed by THC, blocking fragmented IPv6 packets inbound is not possible, e.g. HP:
ReplyDeletehttp://h30499.www3.hp.com/t5/Comware-Based/Securing-IPv6-on-A-series-Comware-5-2/td-p/2380573
What about other vendor´s impementations? Cisco, Juniper, Foundry, Extreme,...?
Apropos IPv6 security, this might be interesting for you:
http://www.keithobrien.org/uploads/1/0/8/1/10819770/ipv6_security_talk_2012.pdf
P.S. google cache is evil.