A new vulnerability in IPv6 LAN

1
A new vulnerability in IPv6 LAN

• Yu Qu
• MOE Key Lab for Intelligent Networks and Network
  Security, State Key Lab for Manufacturing
  Systems, Xian Jiaotong University, Xian 710049

2
Outlines
3
1 Introduction

• Presentation keywords
• Network security, IPv6, ICMPv6, Network protocol
• Many countries and districts have their own
  strategies on developing IPv6 network
• US Internet2, Moonv6
• Europe NRENs
• Japan JNG
• China CNGI
• IPv6 network has entered its prosperity in the
  worldwide

4
1 Introduction

• People usually think IPv6 network is safer.
• ICMPv6 protocol is very useful
• Two class of ICMPv6 messages
• 1.ICMP error messages
• 2.ICMP informational message
• One kind of ICMPv6 messages-Router
  Advertisement(RA) message, can be used by
  attackers.

5
1 Introduction

• RA message can be used to generate the IPv6
  address.

6
2 Analysis of Router Advertisement message and
IPv6 address generation

• Use the prefix information to generate the IPv6
  address in LAN

7
3 Experiment

• The real IPv6 RA message
• the real IPv6 router announce itself
  periodically by sending Router Advertisement
  message

8
3 Experiment

• Attacker can send the fake IPv6 RA message.
• by fabricating a fake prefix.

9
3 Experiment

• Other IPv6 nodes change their address

10
3 Experiment

• The process of attack

11
4 Conclusion and future work

• One protect method is to restrict a normal node
  in IPv6 network to announce itself to be the
  router
• Reinforce the existing and future IPv6 networks
  mechanism

12
4 Reference

• 1 Drago agar, Kresimir GrgiC, Snjeana
  Rimac-Drlje. Security aspects in IPv6 networks -
  implementation and testing. Computers and
  Electrical Engineering archive Volume 33, Issue
  5-6 (September 2007). Pages 425-437.
• 2 Conta A, Deering S. Internet control message
  protocol (ICMPv6) for the Internet protocol
  version 6 (IPv6) specificationR. IETF, RFC
  2463, 1998.
• 3 Joseph Davies. Understanding IPv6. Microsoft
  Press, 2003.

13
QuestionsAnswers
14
Thank You !