A Comparison of Internet Protocol (IPv6) Security Guidelines

Abstract

The next generation of the Internet Protocol (IPv6) is currently about to be introduced in many organizations. However, its security features are still a very novel area of expertise for many practitioners. This study evaluates guidelines for secure deployment of IPv6, published by the U.S. NIST and the German federal agency BSI, for topicality, completeness and depth. The later two are scores defined in this paper and are based on the Requests for Comments relevant for IPv6 that were categorized, weighted and ranked for importance using an expert survey. Both guides turn out to be of practical value, but have a specific focus and are directed towards different audiences. Moreover, recommendations for possible improvements are presented. Our results could also support strategic management decisions on security priorities as well as for the choice of security guidelines for IPv6 roll-outs.

Securing future healthcare environments in a post-COVID-19 world: moving from frameworks to prototypes

“…In healthcare systems, there is a need to protect the confidentiality and privacy of healthcare records, since there are several people who may have access to them. Only authorised personal with access rights depending on their roles is permitted to access these healthcare records [ 26 ].…”

“…The design of the developed capability-based system is based on the flexible approach of IPv6, which uses both unique ID as well as location as a mechanism to allow communications between objects [ 26 ]. This approach improves performance and increases security [ 27 ].…”

Exploring a New Security Framework for Future Healthcare Systems

“…In this proposed framework, the capability system is based on the address space of IPv6. IPv6 is the latest version of the Internet Protocol (IP) [29]. It provides an identification and location for every computer, mobile phone, and any other mobile device on networks across the internet through its IP address.…”

A Comprehensive Survey on Vertical Handover Security Attacks during Execution Phase

“…The IPv6 is the expected successor to the IPv4 where the main goal of the IPv6 is to offer larger addressing space compared with the IPv4 [9]. Although IPv6 provides built-in security mechanism via IP Security (IPSec), the IPv6 is still vulnerable to the security threats: firewall evasion by fragmentation, header manipulation, smurf attack (broadcast amplification attack), host initialisation attack and reconnaissance attack [8].…”