The full list of our presentations is available here.

2013

  • Security Assessment of Neighbor Discovery (ND) for IPv6IETF 86. March 10-15, 2013. Orlando, Florida, U.S.A. (slides [.odp] [.pdf])
  • Security Implications of IPv6 Options of Type 10xxxxxxIETF 86. March 10-15, 2013. Orlando, Florida, U.S.A. (slides [.odp] [.pdf])
  • A method for Generating Stable Privacy-Enhanced Addresses with IPv6 SLAACIETF 86. March 10-15, 2013. Orlando, Florida, U.S.A. (slides [.odp] [.pdf])
  • On the Validation of TCP Sequence NumbersIETF 86. March 10-15, 2013. Orlando, Florida, U.S.A. (slides [.odp] [.pdf])
  • IPv6 Network Reconnaissance: Theory & PracticeIEPG 86. March 10, 2013. Orlando, Florida, U.S.A. (slides [.odp] [.pdf])

2012

  • DHCPv6-Shield: Protecting Against Rogue DHCPv6 ServersIETF 85. November 4-9, 2012. Atlanta, GA, USA. (slides [.odp] [.pdf])
  • Virtual Private Network (VPN) traffic leakages in dual-stack hosts/networksIETF 85. November 4-9, 2012. Atlanta, GA, USA. (slides [.odp] [.pdf])
  • Network Reconnaissance in IPv6 NetworksIETF 85. November 4-9, 2012. Atlanta, GA, USA. (slides [.odp] [.pdf])
  • Virtual Private Network (VPN) traffic leakages in dual-stack hosts/networksIETF 85. November 4-9, 2012. Atlanta, GA, USA. (slides [.odp] [.pdf])
  • IPv6 Toolkit: Security Assessment and Trouble-shooting of IPv6 networksIEPG 85. November 4, 2012. Atlanta, GA, USA. (slides [.odp] [.pdf])
  • Current Issues with DNS Configuration Options for SLAACIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • Managing the Address Generation Policy for Stateless Address Autoconfiguration in IPv6IETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • Security Implications of Predictable Fragment Identification ValuesIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • DHCPv6-Shield: Protecting Against Rogue DHCPv6 ServersIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • Host Scanning in IPv6 NetworksIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • Security Implications of IPv6 on IPv4 NetworksIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • ND-Shield: Protecting against Neighbor Discovery AttacksIETF 84, July 29-August 3, 2012. Vancouver, Canada. (slides [.odp] [.pdf])
  • Generating Stable Privacy-Enhanced Addresses with IPv6 SLAACIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Security Implications of Predictable Fragment Identification ValuesIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Security Implications of the Use of IPv6 Extension Headers with Neighbor DiscoveryIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Security and Interoperability Implications of Oversized IPv6 Header ChainsIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Managing the Address Generation Policy for Stateless Address Autoconfiguration in IPv6IETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Implementation Advice for RA-GuardIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Filtering of IPv4 packets containing IPv4 OptionsIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])
  • Recommendations for filtering ICMP messagesIETF 83, March 25-30, 2012. Paris, France. (slides [.pdf])

2011

  • Managing the Use of Privacy Extensions for SLAAC in IPv680th IETF Meeting, March 27-April 1, 2011. Prague, Czech Republic. (slides [.pdf] [.ppt])
  • Security Assessment of the Transmission Control Protocol (TCP)80th IETF Meeting, March 27-April 1, 2011. Prague, Czech Republic. (slides [.pdf] [.ppt])
  • Defending Against Sequence Number Attacks80th IETF Meeting, March 27-April 1, 2011. Prague, Czech Republic. (slides [.pdf] [.ppt])

2010

  • Moving the Endpoint Identifier (EID) Option to Obsolete Status79th IETF Meeting, November 7-12, 2010. Beijing, China. (slides [.pdf] [.ppt])
  • Security Assessment of the IPv6 Flow Label79th IETF Meeting, November 7-12, 2010. Beijing, China. (slides [.pdf] [.ppt])
  • Mitigating Teredo Routing Loop Attacks79th IETF Meeting, November 7-12, 2010. Beijing, China. (slides [.pdf] [.ppt])
  • Deprecation of ICMP Source Quench messages79th IETF Meeting, November 7-12, 2010. Beijing, China. (slides [.pdf] [.ppt])

2009

  • TCP for DNS security considerations76th IETF Meeting, November 9-13, 2009. Hiroshima, Japan (slides [.pdf] [.ppt])
  • Security Assessment of the Internet Protocol version 476th IETF Meeting, November 9-13, 2009. Hiroshima, Japan (slides [.pdf] [.ppt])
  • Recommendations for filtering ICMP messages76th IETF Meeting, November 9-13, 2009. Hiroshima, Japan (slides [.pdf] [.ppt])
  • Security Implications of Network Address Translators (NATs)76th IETF Meeting, November 9-13, 2009. Hiroshima, Japan (slides [.pdf] [.ppt])

2008

  • Recommendations for filtering ICMP messages73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • Security Assessment of the Internet Protocol version 473rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • Port randomization73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • On the implementation of TCP urgent data73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • On the generation of TCP timestamps73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • ICMP attacks against TCP73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])
  • Security Implications of Network Address Translators (NATs)73rd IETF Meeting, November 16-21, 2008. Minneapolis, MN, U.S.A. (slides [.pdf] [.ppt])

2006

  • NAT Behavioral Requirements for ICMP. 67th IETF Meeting, November 5-10, 2006, San Diego, CA, U.S.A. (slides [.pdf])
  • TCP User Timeout Option (UTO). 67th IETF Meeting, November 5-10, 2006, San Diego, CA, U.S.A. (slides [.pdf])
  • ICMP attacks against TCP. 67th IETF Meeting, November 5-10, 2006, San Diego, CA, U.S.A. (slides [.pdf])

2005

  • ICMP attacks against TCP. 64th IETF Meeting. November 2005, Vancouver, BC, Canada. (slides [.pdf])
  • TCP’s reaction to soft errors. 64th IETF Meeting. November 2005, Vancouver, BC, Canada. (slides [.pdf])