[ipv6hackers] IPv6 Security research

[Leinweber, James]

> I'm going to spend the next couple of months reading up and getting
more
> familiar with IPv6 and it's workings. So, has anyone got any
suggestions on
> good books and papers on IPv6, maybe with a focus on the security side
of
> things and issues?

NIST SP800-119 "Guidelines for the secure deployment of IPv6" is very
good:
  http://csrc.nist.gov/publications/nistpubs/800-119/sp800-119.pdf
It's less checklist oriented than the title might lead you to hope,
but if you want a nice, deep technical overview of the trickier points
of IPv6,
with an emphasis on security implications, it's fabulous.

Try to avoid books which haven't been updated in the last few years, as
they are liable to be full of deprecated stuff like site-local
addresses,
DNS A6/DNAME [0], NAT-PT, and the like.

-- Jim Leinweber
State Laboratory of Hygiene, University of Wisconsin - Madison
<jim.leinweber at slh.wisc.edu>       phone +1 608 221 6281
PGP fp: D573 AF7D F484 EE2A F0B6  B7DB A870 7518 F87D A0D1

[0] Ok, the DNS stuff was merely demoted back to experimental,
and not actually deprecated.  The IETF will reconsider A6/DNAME
if they ever get popular.