Getting Started With IPv 6 Sam Bowne City

Getting Started With IPv 6 Sam Bowne City College San Francisco Twitter: @sambowne Web: samsclass. info Last modified 10 am 12 -910

i. Clicker Survey

How are you enjoying Bay. Threat? A. Best Con Ever B. Worthwhile C. Meh D. Might be OK if there were free beer E. I'm Bored / Disgusted / Outraged

What do you know about IPv 6? A. Never heard of it B. Heard of it but never used it C. I understand the address format D. I browse the Web with IPv 6 E. I have deployed IPv 6 on servers, routers, etc.

What plans do you have to use IPv 6? A. I don't care about IPv 6 at all B. I'll implement IPv 6, but not for years C. Planning to implement it within a year D. Planning to implement it sooner than a year E. I am already using IPv 6

A Busy Year for Security Professionals

Aurora Attacks China hacked Google n Google hacked China n Everyone is pwned by APT n

Stuxnet LNK 0 Day n SCADA vulnerability n Successful military operation against Iran via cyberspace n

Cybercrime Growth n From Symantec, link Bay. Threat 1

Wikileaks "Insurance" file and cable releases n T 3 h. J 35 t 3 r Do. S Attacks on Wikileaks n DDo. S attacks on Wikileaks n Amazon, Paypal, Dyn. DNS, Master. Card, Visa all throw Wikileaks under the bus n Anonymous attacks Mastercard, Visa, Pay. Pal, a Swiss bank, a Swedish prosecutor's office, maybe Twitter? n

Frank Drebin Where Are You?

Forget All That Because IPv 6 is The End Of The World!

IPv 4 Exhaustion

IPv 4 Addresses: 32 Bits n IPv 4 address: 192. 168. 1. 10 n n Four bytes In Binary: 11000000 10101000 00000001010 n 2^32 total addresses n 4 billion

IPv 4 Address Depletion n Link Baythreat-8

IPv 4 Address Space 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 Class A Class B Class C Class D & E

Jan 21, 2010 Available Blocks: 24 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255

April 10, 2010 Available Blocks: 20 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255

May 8, 2010 Available Blocks: 13 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255

Nov 30, 2010 Available Blocks: 7 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255

2011: The End n Link Bay. Threat-7

The End of the World n No Reprieve n n IANA will not re-purpose class D or E addresses for general use People who ask for IPv 4 addresses after exhaustion will not get them n Hoarding, scalping, and simple direct sale of used IPv 4 addresses will begin soon

IPv 6 The Solution

IPv 6 Addresses: 128 Bits n IPv 6 address n 2001: 05 c 0: 1000: 000 b: 0000: 66 fb n Omitting unnecessary zeroes; 2001: 5 c 0: 1000: b: : 66 fb n Eight fields, each 16 bits long n n 4 n hexadecimal characters 2^128 total addresses 340 billion n Enough for a while n

n Link Bay. Threat-10

Federal IPv 6 Transition Timeline n From Cisco (link Bay. Threat-11)

Executive Summary Thus Far

IPv 4 is Full Image from zinyaw. files. wordpress. com

Migration to IPv 6

Methods of IPv 6 Migration n n Ignore IPv 6: Stay on IPv 4 -only Gateways: Devices that convert IPv 6 to IPv 4 Tunnel: IPv 6 over IPv 4 Dual-Stack: IPv 4 and IPv 6 together Nirvana: IPv 6 -only

IPv 6 Tunnels n n n Fast and easy to set up--best for n 00 bs Not the best for security or performance Free IPv 4 -to-IPv 6 Tunnels Gogo 6. com n Sixxs. net n Tunnelbroker. com n

Go. Go 6 n Easiest

Demonstration

Companies Already on IPv 6 ipv 6. google. com n www. v 6. facebook. com n comcast 6. net n ipv 6. cnn. com n n More at link Baythreat-12

IPv 6 Certifications n n Fun, realistic projects He. net n Link Bay. Threat-13

IPv 6 Sages n n As of 12 -9 -10 Link Bay. Threat-18

IPv 6 Sages at CCSF n n 22 IPv 6 Sages at CCSF so far (12 -9 -10) Link Bay. Threat-19

T-Shirt #1 motivator for IPv 6 Certification n Link Baythreat-9 n

Security Problems

n Used by Ethernet

Privacy Risk n n Anyone who has your IP address also has your MAC address! There is a "Privacy Extensions" technique to avoid this, enabled by default in Vista and Windows 7

ICMPv 6 n n Required for all networks Cannot be blocked Replaces ARP "Neighbor Discovery" is trivial

THC-IPv 6 n n n Hacker's Toolkit Runs fine on Ubuntu, even in VMware on Windows 7 Instructions: link Bay. Threat-14

Other Risks n Many security appliances are not ready for IPv 6, so it often bypasses them n Torrents run over IPv 6 n n n Link Bay. Threat-15 Some VPN appliances are not ready, so IPv 6 connections must bypass them Packet Amplification Attacks n n Routing Header Zero Ping-pong n Links Bay. Threat-16 and 17

i. Clicker Survey

What do you think of Wikileaks? A. It's heroic and improving the world B. It does more good than harm C. It's unimportant D. It does more harm than good E. It's awful and must be eliminated

What do you think of Anonymous? A. It's heroic and improving the world B. It does more good than harm C. It's unimportant D. It does more harm than good E. It's awful and must be eliminated

What do you think of Layer 7 Do. S, like Slow. Loris or th 3 J 35 t 3 r's Xer. Xes? A. Never heard of it B. It's of no importance C. It's a minor threat D. It's a major threat E. It's my top priority

What plans do you have to use IPv 6? A. I don't care about IPv 6 at all B. I'll implement IPv 6, but not for years C. Planning to implement it within a year D. Planning to implement it sooner than a year E. I am already using IPv 6

Contact Sam Bowne n Computer Networking and Information Technology, City College San Francisco n Email: sbowne@ccsf. edu n Twitter: @sambowne n This whole talk and all the referenced links are on my Web site: samsclass. info n n In the " Winter Break 2010 -2011 Events " section