For a secure mobile IP and mobile IPV6 deployment

Abstract

This paper addresses the security problems raised by the introduction of Mobile IP and Mobile IPv6 protocols into existing networks. First, a protocolbased analysis highlights several malicious attacks like masquerade, and denial of service. Then a classical network architecture is studied for the best placements of mobility entities from the security point of view. Firewalls and, possibly NATINAPT devices should take into account the mobility dimension. Impact on the filtering rules enforced within a firewall is presented with inherent security risks. Solutions for the mobile behind a NATINAPT device to remain reachable are exposed with introduced security weaknesses.