IPv6 Neighbor Discovery security (new documents) Dec 17 2012 04:49PM
Fernando Gont (fgont si6networks com)

We have published two documents related with IPv6 Neighbor Discovery

1) "Security Assessment of Neighbor Discovery (ND) for IPv6" (IETF
Internet-Draft). Available at:

This document contains everything you may want to know about IPv6
Neighbor Discovery security, and more... :-)

Kudos to Marc Heuse, who collaborated in the publication of this document!

2) "Security/Robustness Assessment of IPv6 Neighbor Discovery
Implementations". Available at:

This document describes how you can employ our IPv6 toolkit
(<http://www.si6networks.com/ipv6toolkit/>) to perform a number of
attacks against IPv6 Neighbor Discovery implementations, and contains
cross-reference to the IETF I-D mentioned above.

P.S.: If you are a vendor, I recommend you perform an assessment of your
implementation with respect to the identified issues.


Best regards,
Fernando Gont
e-mail: fernando (at) gont.com (dot) ar [email concealed] || fgont (at) si6networks (dot) com [email concealed]
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

Fernando Gont
SI6 Networks
e-mail: fgont (at) si6networks (dot) com [email concealed]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus