IPv6 Neighbor Discovery security treats and opposition

IPv6 Neighbor Discovery 보안 위협과 대응

  • Park, Soo-Duck (The Department of Information and Communications Hanyang University) ;
  • Lee, Yong-Sig (The Department of Information and Communications Hanyang University) ;
  • Rhee, Byung-Ho (The Department of Information and Communications Hanyang University)
  • 박수덕 (한양대학교 정보통신학과) ;
  • 이용식 (한양대학교 정보통신학과) ;
  • 이병호 (한양대학교 정보통신학과)
  • Published : 2006.06.21

Abstract

IPv6 nodes use the Neighbor Discovery Protocol (NDP) to discover other nodes on the link, to determine their link-layer addresses to find routers, and to maintain reachability information about the paths to active neighbors. If not secured, NDP is vulnerable to various attacks. This document specifies security mechanisms for NDP. Unlike those in the original NDP specifications, these mechanisms do not use IPsec.

Keywords