icos-4----Page:11
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21 

NonThreats
“Unauthorized” discovery of the Home Agent address
Even if the address is only sent to authorized users, there is no guarantee that an authorized user will not misuse it
Bogus Home Agent discovery
If the Mobile Node is given a bogus Home Agent address, it will not authenticate during IKEv2 transaction
Eavesdropping to find the Home Agent address while discovered
Home Agent address must be the destination address on Binding Update and so is always public
Attacks on the Mobile Node’s home address
The home address is typically published in the DNS anyway and therefore is public

PPT Version