icos-5----Page:2
1  2  3  4  5 

Neighbor and Router Discovery Security
Vulnerabilities:
Routers could be spoofed
Neighbors could be spoofed
Blocking address allocation
Secure upper layers help, but do not prevent all attacks

Problems with “just use IPsec”
Number of SAs very high
2*N+2 per node
Chicken-and-egg problem
Does not help with authorization
PPT Version