Seeking IPv6 Security Resources

Thu Nov 27 00:21:09 UTC 2014

Hi,

On Wed, Nov 26, 2014 at 08:54:07AM -0500, Joe Klein wrote:
> Chris,
> 
> Are you aware IPv6 has 3 or arguably 4 major generations of standards?
> 
> Each generation requires nuanced defense strategies, based on which clauses
> ("must" and "should") were implemented. Some of the derived security works,
> do not reflect, and in some cases contradict current security
> recommendations.

both very good points, Joe, which I fully second.
This is - to some degree - discussed in this talk:
https://www.ernw.de/download/TROOPERS_IPv6SecSummit_ERNW_IPv6_Structural_Deficits.pdf

which I suggest to add to the resource list in compilation.
[disclaimer: I'm the author]

best

Enno

 The perceived newness of the technology, and ambiguities
> of recommendations have resulted in 'pushback' by the security community to
> implement IPv6. This has forced us to continue with the implement of IPv6
> and 'trust' the vender recommendations, based on the limitations of that
> venders products.
> 
> In the cracks, between the standards and implementation of these standards,
> are where security vulnerabilities exist, compromises lay, and defenses
> crumble.
> 
> Joe Klein
> "Inveniam viam aut faciam"
> 
> On Tue, Nov 25, 2014 at 3:32 PM, Chris Grundemann <cgrundemann at gmail.com>
> wrote:
> 
> > Hail NANOG!
> >
> > I am looking for IPv6 security resources to add to:
> > http://www.internetsociety.org/deploy360/ipv6/security/
> >
> > These could be best current practice documents, case-studies,
> > lessons-learned/issues-found, research/evaluations, RFCs, or anything else
> > focused on IPv6 security really.
> >
> > I'm not requesting that anyone do any new work, just that you point me to
> > solid public documents that already exist. Feel free to share on-list or
> > privately, both documents you may have authored and those you have found
> > helpful.
> >
> > Thanks!
> > ~Chris
> >
> > Note: Not every document shared will get posted to the Deploy360 site.
> >
> > --
> > @ChrisGrundemann
> > http://chrisgrundemann.com
> >

-- 
Enno Rey

ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902 

Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey

=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
Twitter: @Enno_Insinuator
=======================================================