[88675] in North American Network Operators' Group
Re: Interesting paper by Steve Bellovin - Worm propagation in a v6 internet
daemon@ATHENA.MIT.EDU (Michael.Dillon@btradianz.com)
Wed Feb 15 06:17:31 2006
In-Reply-To: <Pine.WNT.4.63.0602142042220.3620@jvc>
To: nanog@merit.edu
From: Michael.Dillon@btradianz.com
Date: Wed, 15 Feb 2006 11:19:35 +0000
Errors-To: owner-nanog@merit.edu
> One of method missing is doing top down random walks of ip6.arpa.
Given the difficulty of finding IP addresses for free,
perhaps the commercial people will take over the whole
botnet business. Then it is simple to find IPv6 addresses
to attack. Simply buy webserver logs on the open market
similar to the way the bad guys now buy lists of credit
card numbers. People are always the weak link in any
security scenario, no matter how bulletproof the
technologists may claim it is.
IPv6 may have less impact on the fact of botnet activity
and more impact on the sociology of the participants.
--Michael Dillon
