Overview
![](/assets/images/picto-drapeau-france-3a76576a5d60a512053b4612ab58dae5.png)
ABSTRACT
The IPv6 protocol defines new types of addresses presenting useful safety properties. The IPv6 and in particular the stateless IPv6 address autoconfiguration are essentially based on the Neighbor Discovery Protocol (NDP). As this mechanism is vulnerable to attacks, solutions, and notably Secure Neighbor Discovery (SEND), have been standardized in order to reduce such vulnerability. They however present certain limitations.
Read this article from a comprehensive knowledge base, updated and supplemented with articles reviewed by scientific committees.
Read the articleAUTHOR
-
Jean-Michel COMBES: Internet/Intranet Security R Engineer
INTRODUCTION
The IPv4 protocol suffers from a number of weaknesses. The main problem is address space. IPv4 addresses have a length of 32 bits, which represents some 4 billion possible addresses. With the explosive growth of the Internet and the waste of addresses due to the class structure, the number of IPv4 addresses has become insufficient.
Another problem is the saturation of routing tables in the Internet's main routers. Although emergency measures were taken as early as 1993, these only served to postpone the deadline. In 1994, the Internet Engineering Task Force (IETF) launched work to specify the Internet protocol that would replace IPv4: this protocol is IPv6.
This article describes :
-
the different IPv6 address types and classes specified by the IETF ;
the Neighbor Discovery Protocol (NDP), and the Stateless Address Autoconfiguration (SLAAC), an IPv6 address auto-configuration mechanism based on it;
the NDP mechanism, necessary for NDP to function correctly in certain architectures.
Lastly, we discuss the following topics in turn:
security flaws in the NDP mechanism ;
palliative solutions to limit the latter;
the SEcure Neighbor Discovery (SEND) mechanism, the IETF-standardized solution for securing the NDP mechanism, and the limitations of such a solution.
The NDP mechanism is the heart of the IPv6 protocol. It is required whenever an IPv6 node wishes to assign itself an address. It enables an IPv6 node to communicate with other IPv6 nodes, including routers. The security of this mechanism is also crucial to IPv6.
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
![](/assets/images/logo-eti-286623ed91fa802ce039246e516e5852.png)
The Ultimate Scientific and Technical Reference
KEYWORDS
addressing | auto-configuration
CAN BE ALSO FOUND IN:
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
IPv6 security
Bibliography
Websites
NIST-CSRC – National Institute of Standards and Technology Computer Security Resource Center http://csrc.nist.gov
IANA – Internet Assigned Numbers Authority – Domain name management, number resources and protocol assignment http://www.iana.org
Exclusive to subscribers. 97% yet to be discovered!
You do not have access to this resource.
Click here to request your free trial access!
Already subscribed? Log in!
![](/assets/images/logo-eti-286623ed91fa802ce039246e516e5852.png)
The Ultimate Scientific and Technical Reference