applied security conferences and training: CanSecWest | PacSec | EUSecWest |

Security Masters Dojo

Advanced and intermediate security training and technology enhancement for information security professionals.

CanSecWest: Security Masters Dojo Vancouver

IPv6 Network Security with Scapy

Register for the March 12-13, 2-day course


Instructor(s):
Guillaume VALADON (guillaume@valadon.net)

Description

Depending on who you ask and how you look at it, IPv6 can be considered either a minor or a major evolution from IPv4 - especially on the security front. What is clear is the IPv6 introduction and deployment, and the mix of IPv4 and IPv6, creates security vulnerabilities and windows of opportunities for the bad guys.

Continuously updated since 2009, this dojo mixes theory and practice in order to achieve an immediate application of the material. The different topics discussed during the dojo are the result of feedback with students from companies, government entities, and universities. They reflect typical IPv6 practical issues.

Starting from the basics, we will learn IPv6 security together, and practical attacks with Scapy (https://github.com/secdev/scapy); a powerful packet manipulation library.

This dojo aims to provide a full understanding of IPv6 attacks and defence mechanisms. No previous IPv6 knowledge is required, as the instructor will go through the protocol in details. During the lab sessions, you will learn to master Scapy and build your own IPv6 attacks against real targets.

At the end of the dojo, you will fully understand IPv6, and realize that it is not "just a small change in the network," as it impacts a lot of systems and applications.

A free USB key containing a bootable Linux, as well as the dojo material and Scapy examples, will be distributed to students.

PREREQUISITE WARNING Each class has prerequisites for software loads and a laptop is mandatory. These individual class guides will list material the students are expected have knowledge about coming in and software tools that need to be pre-installed before attending so you get the maximum benefit from the focused intermediate or advanced level course. Please pay particular attention to the prerequisites, as the material listed there will not be reviewed in the courses, and will be necessary to get the maximum benefit out of these educational programs.

Topics

Pre-requisites:

The student should be "fluent" with tcpdump/wireshark output, understand basic TCP/IP routing and basic Linux network commands. No prior knowledge of IPv6 or Scapy is required.

What you will need to bring:

The lab exercises are based on Scapy, and wireshark. You have to bring your own laptop, running Linux (native or virtualised). Make sure the operating system is working properly especially the network component if you run it inside a VM.

You don't have to pre-install the tools.