Qual o estado da cibersegurança de redes IPv6? um estudo comparativo de vulnerabilidades em redes IPv4 e IPv6

Abstract

This work was developed with the aim of studying the current state of IPv6 networks cybersecurity, seeking to compare vulnerabilities of different versions of the IP protocol. The objective of this work is to compare vulnerabilities cataloged in IPv4 networks with those cataloged in IPv6 networks, in order to study the state of the art of IPv6 protocol cybersecurity. To fulfill this objective, the vulnerabilities cataloged for IPv4 and IPv6 networks in the NVD database were explored, making a comparison between the vulnerabilities of the two protocols. Vulnerabilities unique to IPv4 and unique to IPv6 were also studied, categorizing them into different operating systems and the network attacks they might facilitate. To carry out the comparison process, the severity, exploitability and impact scores of the cataloged vulnerabilities were collected, in addition to other audits that could be detected to verify the differences and similarities of scores between vulnerabilities in IPv4 and IPv6 networks. The results obtained were compared with those of previous works, by other authors, where it was verified that there was no improvement in cybersecurity in IPv6 in relation to IPv4. A tool capable of collecting information about known vulnerabilities of the IPv4 and IPv6 protocols from the NVD database was developed for the work. The information collected by the tool was then used to study the vulnerabilities of the IPv4 and IPv6 protocols. With this work, it was possible to verify that there is a larger study about vulnerabilities in the IPv6 protocol, in relation to IPv4, possibly in search of bringing security improvements during the migration to IPv6. However, the results obtained in this work found that IPv6 does not bring significant differences in scores compared to IPv4.