Description
Taylor & Francis Ltd Security In An Ipv6 Environment 2008 Edition by Daniel Minoli, Jake Kouns
Analyze Key Security Mechanisms and Approaches with this practical primer, the first book on the market to cover critical IPv6 security considerations.Dan Minoli, author of over 50 books on telecommunications and networks, and Jake Kouns, Chairman, CEO and CFO of the Open Security Foundation, discuss IPv6 security vulnerabilities, considerations, and mechanisms, and survey approaches for ensuring reliable and controlled IPv6 migration. The authors pool knowledge from industry resources, RFCs, and their own considerable security experience, discussing key IPv6 features, security issues, and potential exploitation of IPv6 protocol. They examine use of firewalls and encryption, and the fundamental topic of IPSec in IPv6 environments.Protect Networks from New and Growing Threats An increasing amount of mission-critical commercial and military operations are supported by distributed, mobile, always-connected, hybrid public-private networks, especially IPv6-based networks. The number of attackers or inimical agents continues to grow, and all computing environments must feature high-assurance security mechanisms. Even administrators in pure IPv4 environments require at least a rudimentary understanding of IPv6 security principles to safeguard traditional networks. This comprehensive book explains why security savvy approaches are indispensible and includes considerations for mixed IPv4 and IPv6 migration environments. More than an exhaustive treatment of IPv6 and security topics, this text is a point of departure for anyone adjusting to this technological transition and subtending security considerations. About the AuthorsDaniel Minoli, director of terrestrial systems engineering for SES Americom, has done extensive work with IPv6, including four books on the subject.Jake Kouns (CISSP, CISA, CISM), director of information security and network services for Markel Corporation, is also co-founder and president of the Open Security Foundation. Introduction, Overview, and MotivationsIntroduction and MotivationsIPv6 OverviewOverview of Traditional Security Approaches and MechanismsBasic IPv6 Protocol MechanismsIPv6 Addressing MechanismsAddress TypesAddresses for Hosts and RoutersIPv6 Addressing (Details)IANA ConsiderationsCreating Modified EUI-64 Format Interface Identifiers64-Bit Global Identifier (EUI-64) Registration AuthorityMore Advanced IPv6 Protocol MechanismsIPv6 and Related Protocols (Details)IPv6 Header FormatIPv6 Extension HeadersPacket Size IssueFlow LabelsTraffic ClassesUpper-Layer Protocol IssuesSemantics and Usage of the Flow Label FieldFormatting Guidelines for OptionsIPv6 InfrastructureRouting and Route ManagementConfiguration MethodsDynamic Host Configuration Protocol for IPv6More on Transition Approaches and MechanismsSecurity Mechanisms and ApproachesSecurity 101Review of Firewall-Based Perimeter SecurityIPv6 Areas of Security Concerns: AddressesDocumented Issues for IPv6 SecurityBasic IPv6 Security Considerations IPv6 Flow Labels IssuesICMPv6 IssuesNeighbor Discovery IssuesRouting HeadersDNS IssuesMinimum Security PlanIPsec and Its Use in IPv6 EnvironmentsOverviewIPsec ModesIP Authentication Header (AH)IP Encapsulating Security Protocol (ESP)Supportive Infrastructure: IPsec ArchitectureRelated ObservationsFirewall Use in IPv6 EnvironmentsRole of Firewalls for IPv6 PerimetersPacket FilteringExtension Headers and FragmentationConcurrent ProcessingFirewall FunctionalityRelated ToolsSecurity Considerations for Migrations/Mixed IPv4-IPv6 NetworksTransition BasicsSecurity Issues Associated with TransitionThreats and the Use of IPsecNATs, Packet Filtering, and TeredoUse of Host-Based FirewallsUse of Distributed Firewalls