Explore the intricacies of IPv6 security in this comprehensive conference talk from the Hack In The Box Security Conference. Delve into the future of internet protocols with speakers Marc Newlin and Chris Grayson as they discuss the prevalence and engineering feats of IPv6. Learn about gateway and set-top box vulnerabilities, remote web interfaces, and the implications of NAT removal. Discover how IPv6 affects network communication, including many-to-one address mapping and multicast functionality. Examine the challenges of scale in IPv6 and innovative solutions like honey servers for DNS, web, and SMTP. Gain insights into IPv6 address structures and machine learning applications in network analysis. Investigate methods for identifying aliased networks and understand the scanning process for IPv6 addresses. Conclude with a recap of key points and implications for future network security.
Overview
Syllabus
Intro
Speaker Bio
The Future is a Scary Place...
What is IPv6?
How Common is IPv6?
IPv6 is a Great Engineering Feat!
A Tale of Gateways and Set Top Boxes
Send-to-TV / Remote Web UI
Remote Web Inspector
No More NAT (Kinda)
IPV6 is the Preferred Communications Protocol
Many-to-one Addresses to Interfaces
Multicast is the New Broadcast
The Problem of Scale
Breaking Down the Problem
Honey DNS Server
A Quick Note on PopAds
Honey Web Server (cont'd)
Honey SMTP Server
Structure in IPv6 Addresses
MACHINE LEARNING BAYBEEEE
The Entropy/IP Paper
Dumbing Things Down (Modeling)
Dumbing Things Down (Prediction)
Enter Aliased (ie: Jerk) Networks
Identifying Aliased Networks (Initial)
Identifying Aliased Networks (Network Size)
Identifying Aliased Networks (Network Size cont'd)
The Scanning Loop
Proof in the Pudding?
Recap
Taught by
Hack In The Box Security Conference
