IPv6 Security

IPv6 is the next generation of Internet protocol standard that is going to replace IPv4, the current standard of the Internet but is exhausting with its available address space.

Quick Tips for General Users

On-going process and continuous effort are required to protect computers from cyber attacks, no matter which IP technology is being used. Users are suggested to perform the following tasks regularly so as to protect your computer and surf the Internet in a safer way.

• Install and enable anti-virus software, and keep it up to date using the latest virus signatures. Enable real-time detection and schedule regular full scan.
• Apply the latest security patches or updates from product vendors to your operating system and the applications installed in your computer.
• Use strong password and change it periodically.
• Install and enable personal firewall software.
• Do not open suspicious emails nor follow URL links from un-trusted sources (including links in social networking sites) to avoid being re-directed to malicious websites or falling prey to phishing attacks.
• Always be wary when giving off sensitive or personal information. Legitimate service providers seldom ask for your personal or account information through email. Consult the relevant organisation if in doubt.

If you would like to join the IPv6 world, you may first test your IPv6 connectivity at http://testipv6.com/

Security of IPv6

The IPv6 protocol has solved some, but not all, of the security problems found in IPv4 networks. One example is the mandatory inclusion of IP Security (IPsec) in the IPv6 protocol, which makes it fundamentally more secure than the older IPv4 standard. However, given its flexibility, the IPv6 protocol introduces new problems. A mobile IP protocol is built into the IPv6 protocol, and security solutions for this protocol are still under development.

In addition, the dynamic configuration flexibility of IPv6 (such as stateless address auto-configuration) could also become a serious security problem, if not implemented correctly. The overall enhancements in IPv6 may provide better security in certain areas, but there are areas that attackers may be able to exploit. This article will focus on the security improvements over IPv4, possible threats, security considerations and some best practices on IPv6 deployment.

Download the full contents (in PDF format)

( To view and print the downloaded document, you need to use an Adobe Acrobat Reader. Please click here to download if necessary. )