1. Denial-of-Service, Address Ownership,and,Early Authentication in IPv6 World (An Approach) Aditya Vutukuri From article by Pekka Nikander Ericsson Research

2. Summary Derived an initial list of Requirements and Goals for the Protocol that would protect IPv6 hosts from Potential DoS(Denial of Service) and Traffic diversion attacks through discussing two major problems : 1)Chicken and Egg problem( here:Ip Ipsec) 2)Address Ownership problem And thus outlined some building blocks which could be parts of such protocol.

3. Comments +VE Good systematic way of solving a potential problem. Good technical exposure to some of the Potential security issues like DoS which we are facing. -VE Protects Verifier only.

4. Assumption The whole protocol works on the assumption that the routing infrastructure is not Compromised.

5. Protection Using Host id as crypto token. Using random numbers. Using one time password mechanism.

6. Protection(Cont.) Using Cryptographic Tokens uses lower 62bits of IPv6 address to store cryptographic hash of the Public key. host ID=HASH 62 (public key/random) dis-advantage: problem arises if host discloses random.

7. Protection(cont.) Protection (cont.) H N := HASH 160 (Public Key | random) H i := HASH 160 (Public key | H i+1 ) Host ID := HASH 62 (H 0 ) while collision occurs, both parties authenticate each other just by reveal their H 0 if not by revealing H 1.

8. Protection(cont.) Protection (cont.) Puzzles can also be used to protect oneself from DoS. Recipient Initiator Puzzle correct YES NO Deny

9. Question Question Is this enough to SAVE your computer from Potential threats Like DoS ? Is this enough to SAVE your computer from Potential threats Like DoS ?

10. Thank You

11. Queries ?

12. What’s a Denial-of-Service? It refers to a broad family of different methods that hackers use to try to prevent legitimate users from accessing web servers, mail servers networks and other systems.

13. Chicken & Egg Problem A is required to perform B and B is required to perform A Here: IPSec is needed to Configure IP and IP is needed to Configure IPSec.

14. Address Ownership Who owns an IPv6 / link-layer address? Is the owner an authorized agent? Proof??????????