ICMPV6 Vulnerability: The Importance of Threat Model and SF-ICMP6

IPv6 existence has increased the challenges in maintaining security of an enterprise network. Besides taking a good care of the network operation and activities, analyzing the network vulnerabilities during IPv6 deployment is necessary. Some specific IPv6 vulnerabilities that are commonly debated are reconnaissance attacks, misuse of routing header type 0 (RH0), misuse of multicast, and misuse of ICMPv6 (Durdagl & Buldu, 2010). An overview of these vulnerabilities is depicted in Figure 1. By identifying the vulnerabilities of IPv6 and the cause that initiates them, determining the appropriate countermeasure is possible. Unfortunately, the misuses of multicast and ICMPv6 have not totally been solved. ICMPv6 is precisely designed to tell the host about errors encountered in incoming or outgoing packets. ABSTRACT