Skip to Main Content
IPv6 Essentials
book

IPv6 Essentials

by Silvia Hagen
July 2002
Beginner content levelBeginner
360 pages
11h 19m
English
O'Reilly Media, Inc.
Content preview from IPv6 Essentials

Security in the Current Internet Environment

The original designers of the current IP protocol (IPv4) did not have to worry too much about security because the Internet was a trusted network for “the happy few.” In addition, the design that is still in use today was considered a prototype that would be redesigned and extended over time. This historical development leads to two fundamental observations concerning security in today’s Internet:

  • Many protocols base their security on the assumed authenticity of IP addresses and port numbers. Based on the assumption that there are networks connected to the Internet that are entirely controlled by their respective user groups, we must not anticipate that any element in an IP packet is secure or cannot be read or modified. This implies that we must not trust an IP sender address or port number (nor any other element in the IP or transport header).

  • Most protocols (application protocols, in most cases) that use a user identification and password authentication mechanism transmit the password in clear text or in a form that can easily decoded, such as Base 64. One-time password mechanisms or challenge/reply mechanisms are seldom used, although some standards have been developed to protect password/credential exchanges. This implies that security flaws in one of the lower protocol layers, which enable an attacker to read the data in transmission, can be used to attack application programs and user accounts (i.e., the application layer). ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

IPv6 Essentials, 2nd Edition

IPv6 Essentials, 2nd Edition

Silvia Hagen
IPv6 Security

IPv6 Security

Scott Hogg, Eric Vyncke

Publisher Resources

ISBN: 0596001258Catalog PageErrata