How to Secure Your PayPal account with Two step verification

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRoVNb4367WNPb3i2zmT7dn3G1PwLmOUdUpevFUPsIRDA-f_pX7YPTQrmhhXShVMfc9xlHCTcRLs2kZMdoJBwvHwD58pDGsRzV4adLgEzWVeqz9pMrclYUQ3iUOTPpLAoRdNTD98KgUhU/s1600/download.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Secure Your PayPal account" border="0" height="182" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRoVNb4367WNPb3i2zmT7dn3G1PwLmOUdUpevFUPsIRDA-f_pX7YPTQrmhhXShVMfc9xlHCTcRLs2kZMdoJBwvHwD58pDGsRzV4adLgEzWVeqz9pMrclYUQ3iUOTPpLAoRdNTD98KgUhU/s400/download.jpg" title="" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><b>Secure Your PayPal account</b></div><div><br /></div><span style="font-family: Verdana, sans-serif;"><br />In simple word,<b>Paypal </b>is a online service to pay.It provide simple,easy and secure interface to pay online. In all online paying services,Paypal is leading one.It support 190 countries all over the world but not in Pakistan.Last time we have wrote an article <b><a href="http://www.anzaq.com/2013/08/verify-paypal-account-in-pakistan.html.This" rel="nofollow" target="_blank">verify Paypal account in Pakistan</a> </b>article tells you detailed information about verification of Paypal in Pakistan.So, question of verification of Paypal in Pakistan is solved out. <br /><br /><b>How Paypal works?</b><br />Paypal provide <b>flexibility</b>. Just you need to have have an email address and a credit card or bank account. You can pay by choosing PayPal at checkout, logging into your PayPal account, and confirming your payment.Paypal never expose Your bank and credit card information to anyone.<br /><br /><b>How much Paypal Is Secure?</b><br /> Any paying service account which hold your saving must be secured. If you have a Paypal account for online earning,then next question is how much your paypal account is secured.<b>Security </b>of Paypal depend upon yourself how much you make it secure.Personally Paypal never expose Your bank and credit card information to anyone.You can make your paypal account more secure by <b>Using two-factor authentication </b>. </span><br /><div><span style="font-family: Verdana, sans-serif;"><br /><b>How </b></span><b style="font-family: Verdana, sans-serif;"> two-factor authentication Make Paypal secure?</b></div><div><span style="font-family: Verdana, sans-serif;"><b><br /></b>Two-factor authentication produce an extra layer of security between your account and saving or data. Paypal two-factor authentication is just like <b>facebook security</b>,you have to enter your phone number and a code sent on your phone which enabled you to login in your Paypal account. Paypal provide two type of security<br /><br />1). Security key<br /><br />2). Mobile phone Security<br /><br /><b>1. Security key</b>: You carry this small credit-card sized device with you. It creates a unique security code on the go.<br /><br /><b>2. Mobile phone security key</b>: You can sign up to get security codes sent by text message to your mobile phone.<br /><br /><b>How to Use two-factor authentication on Your Paypal:</b></span><br /><span style="font-family: Verdana, sans-serif;"><b><br /> Security Key feature</b> allows you to use two-factor authentication by sending code on your mobile phones or credit card sized device.Security by mobile phone is free .you can buy a standalone security key device for $30 which generates security codes for you.Follow given below steps to enable two-factor authentication on Paypal. </span></div><div></div><span style="font-family: Verdana, sans-serif;">1). Go to<b> <a href="https://www.paypal.com/home" target="_blank">Paypal home page</a></b><br /><br />2). Choose the type of Security Key you want. You can start using your mobile phone Security Key right away. If you would like a credit-card size Security Key, we will ship it to you.<br /><br />3). Activate it from your PayPal or eBay account.</span><br /><div><span style="font-family: Verdana, sans-serif;"><br />5). Click on "Security" at bottom of page or go to <b><a href="https://www.paypal.com/us/webapps/mpp/paypal-safety-and-security" target="_blank">here</a>.</b></span></div><div><span style="font-family: Verdana, sans-serif;"><br />4). Log in your in your account by Email adress and password.<br /><br />6). Select the type of Security Key you want. You can start using your mobile phone Security Key . If you would like a credit-card size Security Key, we will ship it to you.</span></div><div><span style="font-family: Verdana, sans-serif;"><br />7). To enable mobile phone security Press the Order button under Register.</span></div><div><span style="font-family: Verdana, sans-serif;"><br />8).Enter your mobile number ,Take a notice on terms and conditions, click on agree and then click on "Register". </span></div><div><span style="font-family: Verdana, sans-serif;"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwCj3rcSOn-IuQsAz53_0alnZiwTu2r48qg-ZQfPOs72nY9OrtQsY2HskYUHkVP72oNXftOZ-ZdnnavSl-lgETrYKiTzO-wC5AwndsT440u7EvwB1opEOXmMyHJOrpv3w-iz7qdTjRFAE/s1600/paypal_register_phone-100066480-large.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Secure Your PayPal account" border="0" height="147" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwCj3rcSOn-IuQsAz53_0alnZiwTu2r48qg-ZQfPOs72nY9OrtQsY2HskYUHkVP72oNXftOZ-ZdnnavSl-lgETrYKiTzO-wC5AwndsT440u7EvwB1opEOXmMyHJOrpv3w-iz7qdTjRFAE/s400/paypal_register_phone-100066480-large.png" title="" width="400" /></a></div><div><span style="font-family: Verdana, sans-serif;"><br /></span></div><div><span style="font-family: Verdana, sans-serif;"><br />9). A 6 digit code will be received on your mobile phone by Paypal.</span></div><div><span style="font-family: Verdana, sans-serif;"><br />10).Enter the code when and press Activate. The code expires after 5 minutes.</span></div><div><span style="font-family: Verdana, sans-serif;"><br />11). You have make your account secure. The next time you log in to your PayPal account, you'll have to enter a security code after you enter your username and password.</span></div><div><br /></div><div><span style="font-family: Verdana, sans-serif;">Now your <b>Paypal account is secured</b>.If you liked this article mention in comments and share with others.</span></div><div><span style="font-family: Verdana, sans-serif;"><b>Tags</b>: Paypal,secure,<b>secure paypal </b>,how to</span></div></div>

How to Secure Your PayPal account with Two step verification

Secure Your PayPal account In simple word, Paypal is a online service to pay.It provide simple,easy and secure interface to pay online. In...

Read more »

How to Keep Mobile Phones Secured?

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-rY4nP1LFUas/UfWGkUk-JyI/AAAAAAAAC9U/DjlO7tFdK94/s1600/shutterstock_102382234.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to Keep Mobile Phones Secured?" border="0" height="400" src="http://3.bp.blogspot.com/-rY4nP1LFUas/UfWGkUk-JyI/AAAAAAAAC9U/DjlO7tFdK94/s400/shutterstock_102382234.jpg" title="How to Keep Mobile Phones Secured?" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><span style="font-family: Verdana, sans-serif;"><b>How to Keep Mobile Phones Secured?</b></span></div><span style="font-family: Verdana, sans-serif;"><br /></span> <br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">Treat your smart phone like your wallet - keep it safe and on your person at all times.Remember it's not 'just a phone' Remember your smart phone is a computer - all the same security rules apply. This includes checking the authenticity of websites, not clicking on links from people you do not know, and watching out for phishing scams (by email, text or even voicemail) asking for personal information.</span></div><span style="font-family: Verdana, sans-serif;"><br /><b>Secure your phone:</b><br /><b>1.</b> Turn on the security features of your phone. All phones have security settings, so familiarise yourself with them and turn them on.</span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b>2.</b> Many mobile phones allow users to set a password or Personal Identification Number (PIN) that must be entered to use the phone. Passwords and PINs make it more difficult for thieves to steal your personal information if your phone is lost or stolen.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">3.</b> Put a PIN on your SIM card and password on your phone so that thieves cannot steal your phone credit or run up your phone bill.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">4. </b>Consider installing security software from a reputable provider. Anti-virus, anti-theft, anti-malware and firewall software is available for some mobile phone operating systems. Check with your phone manufacturer for recommendations.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">5.</b> Check for updates to your phones operating system regularly. Install them as soon as they are available - these updates often contain changes that will make your phone more secure.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">6.</b> Bluetooth lets you wirelessly connect to devices and transfer information over short distances. For Bluetooth to work, devices need to see each other and then connect. It is best to leave your phone in undiscoverable mode (hidden) so that it is only visible when you specifically need other people or devices to see it. This means that hackers cannot easily see your phone and they cannot easily connect to it unless they already have your Bluetooth address. When connecting using Bluetooth, do so in private, uncrowded areas only.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">7.</b> Be smart with Wi-Fi. When connecting to the internet using Wi-Fi, try to use an encrypted network that requires a password and which you are sure is operated by a reputable provider. Read our tips for using public wireless networks. <span style="text-align: left;">Change your settings so that your phone asks permission to join a new wireless network.</span></span></div><span style="font-family: Verdana, sans-serif;"><br /><b>Secure your information:</b><br /></span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b>1.</b> Encrypt your data. Some phones allow you to encrypt the data stored on your phone or memory cards, sometimes through the use of third-party encryption products. Encryption secures your data if your phone is lost or stolen.</span></div><span style="font-family: Verdana, sans-serif;"> </span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">2.</b> Back up your data regularly. Set up your phone so that it backs up all your data each time you synchronize with a computer. Alternatively, backup your device to a memory card regularly and keep it in a safe place.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">3.</b> Do not save passwords or PINs as contacts on your phone unless you encrypt them properly. With all the PINs and passwords we have to remember, it is tempting to save them in your phone as fake contacts in case you forget them, but this can lead to a compromise if you lose your phone or the data in it is stolen.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">4.</b> Avoid online banking in busy public areas. Passers-by could be watching what you are typing (known as shoulder-surfing).</span></div><span style="font-family: Verdana, sans-serif;"><br /><b>Stay with reputable websites and mobile applications (apps)</b><br /><br /><div style="text-align: justify;"><b>1.</b> If your phone allows you to run applications downloaded from the internet, make sure you understand the risks that your personal information including your location, contacts and messages can be breached if the permissions for mobile application are not setup properly.</div><div style="text-align: justify;"><b style="font-weight: bold;">2.</b> Most smart phones allow you to control your personal information accessed by the mobile applications by choosing permissions at the time of installation.</div><b>3.</b> Do not get led into the trap of downloading hoax or malicious software that could contain a virus or malware.</span><br /><br /><div style="text-align: justify;"><b style="font-family: Verdana, sans-serif;">4.</b><span style="font-family: Verdana, sans-serif;"> Think carefully about what information you and your phone shares online and how it could be misused. Your smart phone holds a great deal of personal information in a single place, making the job of fraudsters very easy. So it's not just about what you put on your social networking profile, but also that it's probably easy to work out who you bank with, where you've recently made transactions, the names of your family and to glean other details from emails or other documents.</span></div><span style="font-family: Verdana, sans-serif;"><br /><b>Plan ahead:</b><br /></span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b>1.</b> Note down the details of your phone in case of theft. Every phone has a unique International Mobile Equipment number (IEME). Most phones allow you to find out your own by keying in <b>*#06#</b>. Knowing this number will help your network provider to stop your phone being used if it is stolen.</span></div><span style="font-family: Verdana, sans-serif;"> </span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">2.</b> If you lose your phone or it is stolen, report it to your network operator immediately so it can be disabled. If you find it again you can easily re-enable the phone.</span></div><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;"><b style="font-weight: bold;">3.</b> To assist you in case of mobile theft or loss, ask your provider or manufacturer whether it has services such as mobile tracking and the ability to remotely wipe your information stored on the phone.</span></div><span style="font-family: Verdana, sans-serif;"><br /><b>Be smart about how and where you use your phone:</b><br /><br /><div style="text-align: justify;"><b>1.</b> Turn Bluetooth off when you aren't using it. Bluetooth lets you wirelessly connect to devices and transfer information over short distances. For Bluetooth to work, devices need to see each other and then connect. It is best to leave bluetooth off until you are using it or put your phone in undiscoverable mode (hidden) so that it is only visible when you specifically need other people or devices to see it. This means that hackers cannot easily see your mobile phone and they cannot easily connect to it unless they already have your Bluetooth address. When connecting using Bluetooth, do so in private, uncrowded areas only.</div><div style="text-align: justify;"><b style="font-weight: bold;">2.</b> Stick with reputable sites and applications when downloading applications from the Web. Many mobile phones include internet browsers that let you surf the web and download content to the phone. Do not download content , particularly applications, from unknown or unreliable sources. They could contain malicious software. Use the application store or website of your mobile phone operating system or manufacturer.</div><div style="text-align: justify;"><b style="font-weight: bold;">3.</b> Turn GPS off when not using it. While GPS can provide great benefits in finding out where you need to go, it can also be used by others to see where you or your phone is located.</div><div style="text-align: justify;"><b style="font-weight: bold;">4.</b> Log out of websites when you are finished. It can be tempting to stay logged into a website to save time or so the site can remember your password. It is best not to do this because if your phone is stolen or lost, a user can access your account.</div><div style="text-align: justify;"><b style="font-weight: bold;">5.</b> Think before you click. Do not open multimedia messages (MMS) or attachments in emails, or click on links in emails and SMS messages unless you are expecting them and they are from a trusted source. They could contain malicious software or take you to a malicious website.</div><br /><b>Protect against malicious software:</b><br /><br /><div style="text-align: justify;">Watch out for prompts or warnings asking if you want to allow software to install or run - if you do not know what it is or what it relates to, err on the side of caution. Criminals sometimes try to dupe users into downloading malicious software (often referred to as 'social engineering').</div><br /><b>Symptoms of malicious software infection:</b><br /><br />Your phone may have been infected with malicious software if any of the following things have happened:<br /><ul style="text-align: left;"><li>There is a sudden large increase in your phone bill with no clear reason your phone has emails and messages in the sent folder that you did not send, or </li><li>The user interface has changed without you taking any action to change it.</li><li>Contact your service provider for instructions on how to identify and remove malicious software.</li></ul></span></div><div style="text-align: center;"><script async="" src="http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><br /><!-- bluerectangle --><br /><ins class="adsbygoogle" data-ad-client="ca-pub-9633240579891673" data-ad-slot="1785656539" style="display: inline-block; height: 280px; width: 336px;"></ins><br /><script>(adsbygoogle = window.adsbygoogle || []).push({}); </script><br /></div>

How to Keep Mobile Phones Secured?

How to Keep Mobile Phones Secured? Treat your smart phone like your wallet - keep it safe and on your person at all times.Remember it's...

Read more »

IPv6 Security Overview: a Small View of the Future

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-EC_ZA07fWdI/Ue4h9AihjmI/AAAAAAAACvU/ZwBpo79b9sA/s1600/3087011.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="IPv6 Security Overview: a Small View of the Future" border="0" height="414" src="http://1.bp.blogspot.com/-EC_ZA07fWdI/Ue4h9AihjmI/AAAAAAAACvU/ZwBpo79b9sA/s640/3087011.jpg" title="IPv6 Security Overview: a Small View of the Future" width="640" /></a></div><span style="font-family: Verdana, sans-serif;"><br /><b>Introduction:</b></span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">The current version of Internet Protocol is <b>IPv4</b>. This is used to send data over the Internet and makes interaction between different services possible. As all experts know, this protocol has significant limitations, such as the maximum addressing space and some known security issues. The security problems, in many ways, depend on the original development project, which certainly did not have �security� as a determining factor, and the whole final environment was considered a friendly one. However, over the years, as response to these deficiencies and in consideration of a global network in rapid growth, new technologies, like <b>SSL/TLS</b> and <b>IPSec</b>, have been introduced to remedy these issues.</span></div><span style="font-family: Verdana, sans-serif;"></span><span style="font-family: Verdana, sans-serif;"><div style="text-align: justify;">Despite these enhancements, however, the whole architecture is still missing that level of security and flexibility expected. As result of these known limitations, a new project for a new Internet Protocol has been designed by the <b>IETF</b> in the early 90', having in mind �ease-of-configuration�, performance and security. In this post we will analyze the features of the new suite of internet protocols,its advantages and disadvantages, as well as the possible implications from a security point of view. </div><br /><b>The Old Version Four</b><br /><div style="text-align: justify;">To better understand the actual new features of <b>IPv6</b>, we must first know its predecessor�s. As already mentioned, <b>IPv4</b> was designed with no security in mind. This means that security in communications through this suite of protocols must or should be guaranteed by �end-nodes�. If I need to send or receive highly sensitive data, and then use a secure channel (encryption?), it�s the responsibility of that application to provide that service. Currently, the Internet works this way. This, and many others characteristics that will not be covered in this post, has allowed various types of threats to take off in the digital world. The most famous of these are certainly:</div><br /><b>1) Reconnaissance Attacks:</b><br /><div style="text-align: justify;">This type of attack takes place thanks to the relative small size of IPv4 addressing, because a whole network can be scanned to find open and/or unpatched services. In fact, it is quite easy to perform a reconnaissance scan of a class C network in a few minutes. In this category we can add �Ping Sweep� (sweep a network with ICMP ping messages that solicit a reply), �Port Scan� (to find active and reachable services) and �Application Vulnerability Scan� (to find known vulnerabilities in discovered services).</div></span><span style="font-family: Verdana, sans-serif;"><br /><b>2) Denial of Service Attacks:</b><br /><div style="text-align: justify;">In this type of attack, a service is rendered unavailable through a flood of large amounts of illegitimate requests. It�s possible to mention for this category the smurf attack (remember?).</div><br /><b>3) Man-in-the-middle Attacks:</b><br /><div style="text-align: justify;">The lack of its own authentication mechanism in communications allows hackers to intercept data in transit.</div><br /><b>4) ARP poisoning Attacks:</b><br /><div style="text-align: justify;">In IPv4, ARP (Address Resolution Protocol) is responsible for mapping a host�s IP address with its physical MAC address. This information is stored locally (ARP Table) by each host which is part of the communication. The �ARP Poisoning� attack occurs when an arbitrary ARP reply with incorrect information inside is sent to a host which is part of the communication, implying that legitimate packets will arrive at unforeseen destinations.</div><br /><b>5) Address Spoofing Attacks:</b><br /><div style="text-align: justify;">In the current communication protocols, one of the keys to complete cyber attacks is the ability to modify the source address of a packet. IPv4 allows this possibility since it does not provide any type of source-to-end authentication mechanism. Today these types of attacks are used to spread spam, malware and also to perform DoS/DDoS attacks. IP spoofing also allows masking the true origin of the malicious packets, making the tracking operations more complex.</div><br /><b>6) Malware Attacks:</b><br /><div style="text-align: justify;">Malware, today, remains one of the biggest security-related problems. Currently, with IPv4, malware can not only damage the host affected, but also saturate (or use part of) the network resources in place. It�s necessary to clarify that, with the advent of IPv6, there was no way to eradicate these threats, and the conception of the potential damage by malware infection will essentially remain the same. It�s possible to assume that, however, due to the broader spectrum of addressing, its spread could be slower.</div><br /><b>What�s New in IPv6?</b></span><div><span style="font-family: Verdana, sans-serif;"><b><br /></b></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://2.bp.blogspot.com/-aRJUZYvVby8/Ue4iQQhtxVI/AAAAAAAACvg/XtBNiyTZZ3I/s1600/ipv6security.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="What�s New in IPv6?" border="0" height="220" src="http://2.bp.blogspot.com/-aRJUZYvVby8/Ue4iQQhtxVI/AAAAAAAACvg/XtBNiyTZZ3I/s640/ipv6security.png" title="What�s New in IPv6?" width="640" /></a></div><div><span style="font-family: Verdana, sans-serif;"><b><br /></b></span><br /><div style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">As previously stated, IPv6 is not IPv4's upgrade but a totally new suite of protocols. This means that the differences between the two are very marked:</span></div><span style="font-family: Verdana, sans-serif;"><br /><b>1) Address Space:</b><br /><div style="text-align: justify;">IPv4 provides as many as <b>2^32</b> addresses. IPv6 provides as many as <b>2^128 </b>addresses.</div><br /><b>2) Hierarchical Addressing:</b><br /><div style="text-align: justify;">In IPv6 we can find 3 major types of addresses: Unicast, Multicast and Anycast. Unicast addresses are assigned to a single node. Multicast addresses are assigned to multiples node within a single multicast group while anycast addresses are assigned to groups of nodes.</div><br /><b>3) QoS (Quality-of-Service) and Performances:</b><br /><div style="text-align: justify;">The IPv6 packet header provides for fields that facilitate the support for QoS. In addition, the new standard is a big step forward in terms of performance.</div><br /><b>4) Security:</b><br />The use of IPSec in IPv6 is not optional, but mandatory.<br /><br /><b>5) Extensibility:</b><br /><div style="text-align: justify;">Despite the new features and the considerable increase of addressing space, the IPv6 header is only slightly larger than that of IPv4 (practically just twice, 40 bytes). The IPv6 header does not include any optional fields or a checksum.</div><div style="text-align: justify;">In IPv4, the IPv4 header is followed by data of transport protocol (TCP, UDP), also known as �payload".</div><br /><b>IPng vs Old Attacks</b><br /><div style="text-align: justify;">In this section we will analyze some of the most popular cyber attacks in a perspective focused on the comparison and on the possible impact of these with the IPng.</div><br /><b>1) Reconnaissance Attacks:</b><br /><div style="text-align: justify;">Reconnaissance attacks, in IPv6, are different for two major reasons: The first is that �Ports Scan� and/or �Ping Sweep� are much less effective in IPv6, because of, as already said, the vastness of the subnet into play. The second is that new multicast addresses in IPv6 will allow finding key systems in a network easier, like routers and some type of servers. In addition, the IPv6 network has a much closer relationship with ICMPv6 (compared to the IPv4 counterparty ICMP) which does not allow too aggressive filters on this protocol. For the rest, the techniques remain the same.</div><br /><b>2) Over the Wall:</b><br /><div style="text-align: justify;">This class will discuss the type of attacks in which an adversary tries to exploit little restrictive filtering policies. Currently, we are used to developing access lists (ACLs) to restrict unauthorized access to the network we want to be protected by set specific policies on gateway devices in between the IPv4 endpoints. The need for access control is the same in IPv6 as in IPv4. In IPv6, the basic functions for mitigation of unauthorized access are the same. However, considering the significant differences between the headers of the two protocols, it is possible to imagine different ways to implement them.</div><div style="text-align: justify;"><br /></div><b>3) Spoofing Attacks:</b><br /><div style="text-align: justify;">While L4 spoofing remains the same, due to the globally aggregated nature of IPv6, spoofing mitigation is expected to be easier to deploy. However the host part of the address is not protected. Layer 4 spoofing attacks are not changed, because L4 protocols do not change in IPv6 with regard to spoofing.</div><div style="text-align: justify;"><br /></div><b>4) DDoS Attacks:</b><br /><div style="text-align: justify;">In IPv6, we cannot find the broadcast address. This means that all resulting amplification attacks, like smurf, will be stopped. IPv6 specifications forbid the generation of ICMPv6 packets in response to messages to IPv6 multicast destination address, a link-layer multicast address or a link-layer broadcast address. In general, through the adoption of the new standard, we should find an improvement in this regard.</div><div style="text-align: justify;"><br /></div><b>5) Routing Attacks:</b><br /><div style="text-align: justify;">Routing attacks refer to activities that try to redirect traffic flow within a network. Currently, routing protocols are protected using cryptographic authentication (MD5 with Pre-Shared Key) between peers. This protection mechanism will not be changing with IPng. BGP has been updated to carry IPv6 routing information.</div><br /><b>6) Malware:</b><br /><div style="text-align: justify;">There is no particular implementation in IPv6 which will allow changing the classical approach to malware. However, worms that use the internet to find vulnerable hosts may find difficulties in propagation due to the large address space.</div><br /><b>7) Sniffing:</b><br /><div style="text-align: justify;">This is the classical attack that involves capturing data in transit across a network. IPv6 provides the technology for the prevention of these types of attacks with IPSec, but it does not simplify the problems for keys management. For this reason, this technique can still continue to be practiced.</div><div style="text-align: justify;"><br /></div><b>8) L7 Attacks:</b><br /><div style="text-align: justify;">Here we refer to all those types of attacks performed at Layer 7 of the OSI model. Also considering a worldwide adoption of IPSec, this type of attacks will remain almost unchanged. Buffer Overflow, Web Applications Vulnerability, etc., cannot be stopped through the IPv6 adoption. There is also another consideration: if IPSec will be implemented as a standard for communication between endpoints, all devices such as IDS/IPS, firewalls and antivirus will only see encrypted traffic, promoting this type of attacks.</div><br /><b>9) Man-in-the-Middle:</b><br /><div style="text-align: justify;">The IPv6 is subjected to the same security risks that we may encounter in a man-in-the-middle attack that affects the suite of IPSec protocols.</div><div style="text-align: justify;"><br /></div><b>10) Flooding Attacks:</b>The core principles of a flooding attack remain the same in IPv6.<br /><br /><b>Conclusions:</b><br /><div style="text-align: justify;">Without a doubt, IPv6 represents a big step forward compared to its predecessor. The entire suite of protocols has been designed to bring improvements in both functionality and security. However, despite these, IPv6 raises new challenges in both these fields, without considering the transition problems that occur. In short, it is definitely something that will give much fun to Information Security professionals.</div></span></div></div></div><div style="text-align: center;"><script async src="http://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script><!-- bluerectangle --><ins class="adsbygoogle" style="display:inline-block;width:336px;height:280px" data-ad-client="ca-pub-9633240579891673" data-ad-slot="1785656539"></ins><script>(adsbygoogle = window.adsbygoogle || []).push({}); </script></div>

IPv6 Security Overview: a Small View of the Future

Introduction: The current version of Internet Protocol is IPv4 . This is used to send data over the Internet and makes interaction between d...

Read more »