First Hop Security Considerations in IPV6 Implementation

Abstract

With the evolvement of IPv6 as next generation protocol in Internet, many security issues came into picture with its implementation. The security considerations which were taken care in IPv4 implementations seem to be repeated in term of IPv6 as well. Since IPv6 came up with some new features and changes which corresponds to be more focused on security than IPv4. Basic requirement with the IPv6 implementation is to secure IPv6 LAN which is securing first hop. This paper analyzed all the security considerations of first hop security and also proposed solutions to some partially resolved or unresolved security issues. This paper introduced an approach which changes client behavior on address configuration dynamically. The proposed approach introduced a new flag "N" in RA (router advertisement) packet which forces the client not to perform multi-homing when it is set OFF and allows client to configure one address at time per interface dynamically. This paper also proposed an approach which prevents from IPv6 spoofing attacks.

Securisation of an IPv6 Address Obtaining with SLAAC in Home Networks

“…It should be done for example by using cryptographic exchange. In the second time, we will examine how to integrate our method with FHS (First Hop Security) [10] to have a total control of the mechanisms of security on every equipment of interconnection in the HomeNet Domain (routers and switches) and finally to see its compatibility with the generation of certificate such as CGAs [11].…”