Workshop

IPv6 Security Tutorial
Time: 04 & 05/05/2013

Internet engineers of companies, ISPs, memberships and so on using address applications should attend the workshop. Beside the conference, the workshop gives IPv6 (Internet Protocol version) knowledge and IPv6 Security, which supports the companies in IPv6 deployment. With IPv6 Security Tutorial topic, there are professional IPv6 engineers from JANOG (Japan Network Operators’ Group) taking part in training on 2-day of the event.
Detail:

Day 1: IPv6 Revisit and Network Security

Thời gian Agenda Key Takeaway Document download
09:30-10:00 Introduction, Housekeeping
10:00-11:00 Revisiting the basics - Where IPv6 is used today and where we need to be careful
- IPv6 availability in hosts
- Routing, Apps
11:00-11:15 Break
11:15-12:15 IPv6 basic architecture and security implications: comparisons with IPv4 - IPv6 headers
- NDP
- Various address types (LLA, ULA, GLA)
- SLAAC/ DHCP
- Privacy Extensions
- PathMTU
- Tunneling
 
12:15-13:30 Lunch
13:30-14:30 Most important part of security: the design and goal - Threat models
- Your goals
14:30-14:45 Break
14:45-15:45 Securing the network - IPv4/IPv6 dual stack traps
- What to do with RA
15:45-16:00 Break
16:00-17:00 Exercise - Network design practice

 

Day 2: Applications and Enterprise

Thời gian Agenda Key Takeaway Document download
09:30-10:00 Housekeeping. Review of yesterday
10:00-11:00 Packet Filtering - IP spoofing and source address verification
- Source address selection
Privacy addresses
- TCP/UDP/ICMPv6 filtering
- Actual router configuration
- Packet Filtering 1:
- Packet Filtering 2:
11:00-11:15 Break
11:15-12:15 Fundamental IPv6 security in services - DNS
- WWW
- Mail
12:15-13:30 Lunch
13:30-14:30 Firewall and ALG - Firewall policy
- IP filtering in servers
- Application gateways
14:30-14:45 Break
14:45-15:45 Hands on exercise: securing servers - Packet filtering
- Rate-limiting
 
15:45-16:00 Break
16:00-17:00 Q&A Certification ceremony