MLD Considered Harmful - Breaking Another IPv6 Subprotocol

by Antonios Atlasis & Jayson Salazar & Rafael Schaefer

Multicast Listener Discovery (MLD) and its successor, MLDv2, is a protocol of the IPv6 suite used by IPv6 routers for discovering multicast listeners on a directly attached link, much like IGMP is used in IPv4. Multicasting is a key feature of IPv6 which is supposed to be used even by the Neighbor Discovery process. Most modern Operating Systems (OS), like Windows, Linux, and FreeBSD, not only come per-configured with IPv6 enabled, but they also start-up by sending MLDv2 traffic, which is repeated periodically. Despite of the out-of-the-box usage of MLDv2, it is one of the IPv6 protocols that have not be studied yet to a suitable extent, especially as far as its potential security implications are concerned. These ones can vary from network scanning and OS fingerprinting on the local-link, to amplified DoS attacks and to consumption of resources at routers. To this end, we will discuss potential security issues related with the design of MLD and we will examine how they can be exploited by attackers. A live demo will show how such an attack can take place by using MLD messages in order to disrupt multicasting communication. Finally, specific security mitigation techniques will be proposed to defend against them, which will allow us to to secure IPv6 networks to the best possible extend in the emerging IPv6 era.

MLD Considered Harmful - Breaking Another IPv6 Subprotocol information security 日本語
10 Likes	10 Dislikes
1,430 views views	117K followers
People & Blogs	Upload TimePublished on 29 Aug 2016

Related keywords

1. information security manager
2. black hat anime
3. information security foundation
4. black hat seo technique
5. cyber security tokyo
6. black hat meaning
7. black hatch
8. information security definition
9. information security pdf
10. cyber security market
11. black hat x reader
12. black hat cartoon
13. black hat x dr flug
14. information security foundation 難易度
15. black hatch gamefowl
16. cyber securityとは
17. cyber security management system
18. information security certifications
19. cyber security cloud
20. cyber security pro アンインストール
21. black hat full movie
22. information security specialist
23. cyber security 意味
24. information security foundation 勉強
25. cyber security framework
26. cyber security analyst
27. information security policy template
28. cyber security news
29. cyber security act
30. black hat badger
31. information security foundation 参考書
32. information security management system
33. cyber security conference
34. information security policy
35. information security forum
36. information security news
37. black hat seo
38. cyber security pro
39. information security officer
40. black hat movie
41. cyber security japan
42. black hat cast
43. information security analyst
44. cyber security pro 新しいネットワークが検出されました
45. cyber security cloud managed rules
46. cyber security university
47. black hat hacker
48. black hat forum
49. cyber security company
50. black hat hacking
51. black hat villainous
52. cyber security measures
53. information security governance
54. information security foundation based on iso/iec 27001
55. cyber security report
56. blackhatworld
57. black hat x demencia
58. information security management
59. black hat 2019