Malware Tunneling in IPv6

US-CERT is charged with providing response support and defense against cyber attacks for the Federal Civil Executive Branch (.gov) and information sharing and collaboration with state and local government, industry and international partners. US-CERT interacts with federal agencies, industry, the research community, state and local governments, and others to disseminate reasoned and actionable cyber security information to the public.

All IT Downloads from US-CERT » | Visit US-CERT »

From US-CERT | Aug 11, 2009

The Internet Protocol, version 6 (IPv6) was designed to alleviate the address space limitations of IPv4 and provide additional security and routing capabilities. The protocol itself, however, can be misused to deliver malware in a way that eludes detection by firewalls or intrusion detection systems (IDS) not configured to recognize IPv6 traffic. This problem can be amplified in cases where malware is used to reconfigure vulnerable hosts to allow IPv6 traffic. This guide addresses minimizing risks associated with malware tunneling in IPv6.

The attached Zip file includes:

• Intro Page.doc
• Cover Sheet and Terms.pdf
• Malware Tunneling in IPv6.pdf

Related IT Downloads

• 

  MX Logic Threat Forecast August 2009

  RESEARCH

  More and more infection vectors that don’t rely on e-mail are becoming an ever increasing part of the spammer’s arsenal.

• 

  Computer Security Incident Handling Guide

  TUTORIALS

  This document assists organizations in establishing computer security incident response capabilities and handling incidents efficiently and effectively.

• 

  Top 10 Viruses - October 2009

  RESEARCH

  This table is taken from Network Box's report on Globalization of Malware Production.