There are a lot of seasoned network security pros whose understanding of IPv6 stops at fe80. While IPv4 and IPv6 have a lot of similarities, there are subtle differences that lie beyond many people's comfort zone. This can be problematicwhen those people are responsible for securing a network. This talk will discuss some of the security concerns unique to IPv6, practical security best practices, and key considerations to take when surveying or hunting an IPv6 network. By the end of the talk, my hope is that audience members have some idea of how to approach IPv6 network security beyond trying to disable it on their network entirely.

Jason Lewis works full-time as a defensive cyber operator for the US Air Force. He enjoys trying to find things that he doesn't think people are interested enough in and making people interested in them. This does not make him popular at cocktail parties, but certainly lends itself to an academic setting, conference or podcast. Jason currently holds certifications in Security +, GCFA, CCNA, and CCDA.

Back to Derbycon 2019 video list