There is already an arms race with IPv6 hacker tools, like the THC-IPv6 toolkit and this covert channel tool going up against enterprise protection tools like firewalls and IDS. There is at least one commercial IDS and a couple of good firewalls with the ability to do deep inspection of IPv6 header chains and make useful security decisions to block attacks like this. Of course, the same attacks are available in IPv6, we just made the toolkit for weapons and for defenses bigger and more flexible with IPv6. The ultimate tools are going to be policy enforcement tools like Microsoft NAP and Cisco NAC that can be used to create and manage "distributed firewall" communities.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11406/34005#34005