IPv6 Security and Networking

9.

Common IPv6 Network Attacks

9.1.

Neighbor Discovery Protocol Attacks

9.1.1.

Neighbor Cache Poisoning

9.1.2.

Rogue Router Advertisements

9.1.3.

Man-in-the-Middle Attacks

9.1.4.

Duplicate Address Detection DoS

9.1.5.

Neighbor Unreachability Detection Failure

9.1.6.

Router Solicitation Flooding

9.2.

SLAAC-Based Attacks

9.2.1.

Address Spoofing

9.2.2.

Malicious Prefix Announcement

9.2.3.

Autoconfiguration Hijacking

9.2.4.

Prefix Depletion Attacks

9.3.

9.3.1.

Rogue DHCPv6 Server

9.3.2.

DHCPv6 Starvation Attack

9.3.3.

DHCPv6 Replay Attacks

9.3.4.

Information Disclosure

9.4.

Routing and Header Attacks

9.4.1.

Routing Header Type 0 Exploitation

9.4.2.

Extension Header Manipulation

9.4.3.

Tiny Fragment Attacks

9.4.4.

Header Chain Attacks

9.4.5.

Flow Label Manipulation

9.5.

Transition Mechanism Attacks

9.5.1.

Tunnel Injection

9.5.2.

Tunnel Hijacking

9.5.3.

Amplification Attacks

9.5.4.

NAT64/DNS64 Bypass

9.5.5.

6to4 Relay Attacks

Previous

8. IPv6 Security Landscape

Go to top

Next

10. IPv6 Security Mitigation and Best Practices