The IETF has published RFC 6274, entitled "Security Assessment of the Internet Protocol Version 4", which is an IETF version of the IPv4 security assessment that had been published by…
I have posted a revision of both of my recently-published IETF Internet-Drafts about RA-Guard evasion:IPv6 Router Advertisement Guard (RA-Guard) Evasion (draft-gont-v6ops-ra-guard-evasion-01.txt)Security Implications of the Use of IPv6 Extension Headers with…
I've just published two new IETF Internet-Drafts, that document the problem of RA-Guard evasion, and propose mitigations.They are two Internet-Drafts:IPv6 Router Advertisement Guard (RA-Guard) Evasion, available at: http://tools.ietf.org/id/draft-gont-v6ops-ra-guard-evasion-00.txtSecurity Implications of…
A new IETF RFC that I have authored has been published. It is RFC 6191, entitled "Reducing the TIME-WAIT State Using TCP Timestamps". The Abstract of the RFC is:This document…
Folks,Our document "Recommendations for Transport-Protocol Port Randomization" has just been published as IETF RFC 6056.The Abstract of the RFC is:During the last few years, awareness has been raised about a…
We have published an IETF Internet-Draft entitled "Defending Against Sequence Number Attacks", which is a revision of Steven Bellovin's RFC 1948. The Abstract of the I-D is:This document specifies an…
RFC 6093 (co-authored by Andrew Yourtchenko and me) has just been published by the RFC Editor.It is available at: http://www.rfc-editor.org/rfc/rfc6093.txtThe Abstract of the document is This document analyzes how current…