Archive

IPv6 is making its way into more and more networks. While the worlds largest AS’ were the first to feel the IPv4 crunch and start deploying IPv6, these days any network with any growth at all is forced to pay attention. This means that knowing at least the basics of IPv6 is becoming more and more of a […]

I’m very happy to announce that I’ll be giving a talk next week that doesn’t require me to get on a plane! On Thursday, 16 April at 1300 EDT I’ll be teaming up with USTelecom for a webinar: Security in an IPv6 World: Myth & Reality Now that IPv6 is being actively deployed around the […]

After a quick break to catch our breath (and read all those IPv6 Security Resources), it’s now time to look at our tenth and final IPv6 Security Myth. In many ways this myth is the most important myth to bust. Let’s take a look at why: Myth: Deploying IPv6 Makes My Network Less Secure Reality: […]

This article was written for The New IP, and appeared there under the title “IPv4 vs. IPv6 in the New IP” on 6 March, 2015. As you may have noticed, I tend to (re)post everything I write here on my personal blog. This time I’ve decided to publish this article here with it’s original title, […]

We are approaching the end of this 10 part series on the most common IPv6 security myths. Now it’s time to turn our eyes away from security risks to focus a bit more on security resources. Today’s myth is actually one of the most harmful to those who hold it. If you believe that there […]

Most of our IPv6 Security Myths are general notions, often passed on unwittingly between colleagues, friends, conference attendees, and others. Today’s myth is one that most often comes specifically from your vendors or suppliers. Whether it’s a hardware manufacturer, software developer, or Internet Service Provider (ISP), this myth is all about trust, but verify. Myth: […]

This week’s myth is interesting because if we weren’t talking security it wouldn’t be a myth. Say what? The phrase “96 more bits, no magic” is basically a way of saying that IPv6 is just like IPv4, with longer addresses. From a pure routing and switching perspective, this is quite accurate. OSPF, IS-IS, and BGP […]

Here we are, half-way through this list of the top 10 IPv6 security myths! Welcome to myth #6. Since IPv6 is just now being deployed at any real scale on true production networks, some may think that the attackers have yet to catch up. As we learned in Myth #2, IPv6 was actually designed starting […]

Internet Protocol addresses fill two unique roles. They are both identifiers and locators. They both tell us which interface is which (identity) and tell us how to find that interface (location), through routing. In the last myth, about network scanning, we focused mainly on threats to IPv6 addresses as locators. That is, how to locate […]