Current version of IP and its security features

Current version of IP and its security features

Could you explain what current version(s) of IP are in use? Reviewing material dated from 1996 on, I see references to IP V4, IPng (next generation) and IP V6. In addition, I have read material from NIST related to IPsec, which adds authentication and encryption to IP (V4?). My understanding is that IP V4 has little or no 'security.' What is the 'current' IP, and what security features (authentication, encryption, etc.) does it have?


    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

There is no easy answer to your question, as there are probably implementations of each that are in use today. However, the older IP V4 is used more than the others. IPsec is used by many of the VPN devices currently being marketed. IP V6 will likely slowly become the standard, but it includes an IP V4 compatibility mode so that the transition from IP V4 can occur without having two disconnected Internets. At what point the Internet will become purely IP V6 is anyone's guess. The push for IP V6 will come mainly due to IP address space reasons (we're running out of IP numbers just like we're running out of area codes), not for security reasons.

As you noted, IP V4 does not have any inherent security features built in. You may want to refer to a question I answered on Feb. 26 regarding security loopholes in TCP/IP for more information.


For more information on this topic, visit these other SearchSecurity resources:
Best Web Links: IP Security
Ask the Expert: Security risks of TCP/IP


This was first published in March 2002