IPv6 (in)Security – what we know so far

No ratings

Presented at BsideSLisbon 2013 by

Look and behold, a new protocol is taking over the Internet and our corporate networks: IPv6. The first IPv6 protocol RFC dates back to 1998, yet adoption grew at a very slow rate and significant progress has only been made in the past 3 years. We find ourselves in 2013, transitioning our computer networks to a protocol which was designed and layed out with the security principles of the 90s. Design flaws have been discovered and exploited, counter-mechanisms proposed and implemented, only to be beat again; IPv6 is still proving its worth on the security front and much work is still ongoing by security researchers around the world. In this talk, I propose to dive into IPv6 history of adoption and (in)security, exposing what researchers around the world have been finding and what the current state of the art is regarding secure deployment issues, open RFCs and security tools support.