“The security of IPv4 is roughly equivalent to IPv6. So why do we expect more
from IPv6?”
While I highly value Scott’s IPv6 expertise – not least because I learned a lot
about IPv6 security from
the book on the topic
he wrote together with Eric Vyncke – I
strongly disagree with his statement, mainly with the first part. In this post I
will lay out why I think that IPv6 is actually less secure than IPv4.
Today the ERNW Team participated in the Mudiator mud
race in
Mannheim.
This mud run features 25 obstacles over 8 km, you can do either one or two
rounds. Participating for the first time, the ERNW team went for one round (the
Legionnaire distance as opposed to the two round Hercules distance):
Following our idea of open access to knowledge (both about vulnerabilities and
sports 😉 ), here are some hints/lessons learned:
The final blog in our series “Beyond the Thunderdome: A Review of TROOPERS15”
focuses Exploitation & Attacking. With the last of this series we hope we you
are already fired up and inspired for what lays a head during our upcoming
TROOPERS16 (March 14-18, 2016)! Can’t wait to see
you there!
“The old is new, again. CVE20112461 is back” talk created and given by Luca
Carettoni and Mauro Gentile
Last week we enjoyed quite a wonderful HAXPO exhibition and HITB conference in
Amsterdam. A number of great talks could be heard at the main HITB conference
such as “Bootkit via SMS: 4G Access Level Security Assessment” or
“Stegosploit: Hacking with Pictures“. And not only that: there were also
several engaging hands-on workshops.
Apart from the main conference, there was the HAXPO – a hacker exhibition. At
this exhibition you could connect with people from different companies, get a
lot of merchandise, and also listen to several briefings on security and its
philosophy. Fortunately, we had the pleasure to present two of these briefings
and maybe you tested your web application skills at the ERNW booth.
We hope you are enjoying the ride as we continue our journey through IPv6. Below
we have a great mix of talks, slides, and videos in this area posted below. We
look forward to hosting more IPv6 (March 14^(th) & 15^(th)) talks next year at
TROOPERS16!
“New Features of the SI6 Networks’IPv6 Toolkit” talk created and given by
Fernando Gont
The IPV6 Toolkit was originally developed for UK CPNI in an effort to enhance
and be able to test the current state of IPv6 security. The toolkit itself was
mainly developed for security analysis and trouble shooting of IPv6 networks and
implementations. It is running on a wide range of *nix based systems (this
probably is considered painful to support given that low level implementation of
network functions) and release under the GPL. You can directly check it out
here: https://github.com/fgont/ipv6toolkit.
Welcome to the third edition of “Beyond the Thunderdome: A Review of
TROOPERS15”. The focus today is on IPv6 and Data Center Networks, so kick back
and enjoy the following talks and videos. And as always, check out our website
www.troopers.de for details on TROOPERS16 March
14-18, 2016.
“Enabling and Securing IPv6 in Service Provider Networks” talk created and given
by Tarko Titan
Telekom.ee had no IPv6, 8 moths ago. They deployed IPv6 in about 4 weeks and by
now about 6% of all transported traffic is IPv6 traffic. Actually the 4 weeks
timeframe is a bit too optimistic but more on that later. Tarko first explains
the biggest problems in the network migration, which were the access network and
the Customer -Provider Edge (CPE). Also Telekom Estonia doesn’t want to make a
tradeoff at security in the IPv6 deployment.
Today’s focus in our blog series will cover large-scale environments:
Cryptography in Cloud environments and Network Automation. Since these topics
will only become more important over time stay tuned for our
TROOPERS16’s developing agenda to see what new talks
will be available (or submit your own talk during our Call for Papers starting
in August via our new CFP Submission tool!)
“Crypto in the Cloud” talk created and given by Frederik Armknecht
IPv6 is often called a “complex protocol”, not least by myself (for example in
my
keynote to the IPv6 Security Summit 2014). In
this post I want to have a quick look at three questions:
– Can IPv6 be considered a “complex protocol”?
– Is it “more complex” than IPv4?
– Can we expect IPv6 networks to be “complex networks”?
I’d like to start with some clarifications and a definition. First of all: when
I discuss IPv6 “as a protocol”, this actually means “the IPv6 procotol family”
incl. those helper protocols needed to support (“core”) IPv6 in performing
properly in most networks, like ICMPv6 and MLD.
Then, of course, we have to define the term “complexity”, which is a difficult
task in itself. [MITCHELL2009] gives an overview of several potential
(definition) approaches in a dedicated chapter and the same undertaking is
performed – in quite different ways – by most of the authors of individual
contributions to [PELITI1988].
Here in Heidelberg we are already gearing up for TROOPERS16 (taking place from
14th to 18th March 2016!). While you are preparing for our Call for Papers or
waiting eagerly to sign up for your spot in one of our legendary trainings take
a look at our newest blog series “Beyond the Thunderdome: A Review of
TROOPERS15”. It may offer some inspiration, help you kill time while waiting for
next year’s TROOPERS, or for those that are new to our conference, give you a
taste for what TROOPERS is all about. See you soon
at TROOPERS16!
Two weeks ago Christopher and I joined the RIPE70 meeting in Amsterdam. Being
part of the group was fun as always and we had quite some interesting
conversations with peers from the IPv6 community.
We could even contribute a bit to some discussions, with two talks. I gave one
titled “Will It Be Routed? – On IPv6 Address Space Allocation & Assignment
Approaches in Very Large Organizations” in the Address Policy Working Group
session on Wednesday. This is the abstract:
