The IPv6 Snort Plugin

Presented at DeepSec 2014 „Do you want to know more?“, Unknown date/time (Unknown duration).

There are still very few tools to defend against IPv6 related attacks. To improve this situation I wrote a plugin for Snort, the popular open source intrusion detection system. This plugin adds detection rules and a preprocessor for the Neighbor Discovery Protocol. It is aimed at the detection of suspicious activity in local IPv6 networks and can detect misconfigured network elements, as well as malicious activities from attackers on the network.

Presenters:

• Martin Schütte - DECK36
  Martin Schütte is a system administrator and contributor to different open source projects. He studied political science and computing science in Potsdam. He is currently working as a consultant for DECK36 in Hamburg.

Links:

• https://deepsec.net/archive/2014.deepsec.net/speaker.html#PSLOT185
• https://infocon.org/cons/DeepSec/DeepSec 2014/The IPv6 Snort Plugin.mp4

Similar Presentations:

• DeepSec 2015 „DeepSec No. 9“ / Pentesting and Securing IPv6 Networks (closed)
• DeepSec 2014 „Do you want to know more?“ / IPv6 Attacks and Defenses - A Hands-on Workshop
• Texas Cyber Summit 2019 / WS-3033 Hacking with IPv6 Network Tools