General IPv6 Security Concepts

written by: Ahmad Rivkin; article published: year 2007, month 10;

In: Root » Electronics and communication » Protocols

  Share  
|
  PL  |  NL  |  FR  |  ES  |  PT  |  IT  |  DE  |  DK  |  NO  |  SE  |  FI  |  GR  |  JP  |  CN  |  KR  |  RU  |  AE


In order to protect data, one has to be aware of the possible threats. People often focus solely on malicious attacks from foreign networks. A comprehensive security concept needs to consider many other aspects. Following is a list of possible points of weakness:

  • Insufficient or nonexistent IT security concepts and corresponding provisions

  • Nonobservance or insufficient control of IT security provisions

  • Usurping of rights (password theft)

  • Incorrect use or faulty administration of IT systems

  • Abuse of rights

  • Weaknesses in software (buffer/heap overflows in conjunction with applications running with superuser rights)

  • Manipulation, theft, or destruction of IT devices, software, or data (physical security)

  • Network eavesdropping (sniffing wired or wireless networks) or replaying of messages

  • Trojan horses, viruses, and worms

  • Security attacks such as masquerading, IP spoofing, Denial of Service (DoS) attacks, or man-in-the-middle attacks

  • Routing misuse

There are many statistics showing that malicious attacks from the outside are only a smaller fraction of all the possible risks. Many threats come from within the internal network and can in many cases be related to human misconduct or faulty administration. Many of these risks cannot be controlled by technical mechanisms.

Share

Disclaimer

1) E-articles is not responsible for the information contained by this article as well for any and all copyright infringements by authors and writers. E-articles is a free information resource. If you suspect this article for any copyright infringement, please read the terms of service and contact us or use the "Report this article" button on this page to investigate the problem.
2) E-articles is not responsible for inaccuracies, falsehoods, or any other types of misinformation this article may contain and will not be liable for any loss or damage suffered by a user through the user's reliance on the information gained here.