Explore cutting-edge techniques for evading high-end Intrusion Prevention System (IPS) devices in the IPv6 era. Delve into a 25-minute Black Hat conference talk that unveils three novel methods exploiting minor details in the IPv6 protocol design, rendering even advanced commercial IDPS devices ineffective. Learn how attackers can conduct various attacks, from port scanning to SQL injection, while remaining undetected. Examine the potential security implications for other devices like firewalls, and discover both short-term and long-term mitigation strategies to protect your network. Gain valuable insights into IPv6 security awareness, extension headers, fragmentation, and fundamental protocol issues through a comprehensive outline covering topics such as Chiron, Sivirata Circuit, Watercut, and the Tipping Point.
Evasion of High-End IPS Devices in the Age of IPv6
Overview
Syllabus
Introduction
Outline
IPv6 is important
IPv6 Datagrams
Extension Headers
Problems with Extension Headers
Fragmentation
Fragment header
Summary
A Fundamental Problem
Chiron
Sivirata Circuit
Watercut
Tipping Point
Tipping Point Update
Mitigation Approaches
Conclusion
Outro
Taught by
Black Hat
