## 4 NIST Guidelines for the Secure Deployment of IPv6
### Content Completeness and Depth of the NIST Guide
\begin{table}
\begin{tabular}{l c c c c c c} \hline
**Category** & **A** & **B** & **C** & **D** & **E** & **F** \\ Specification \& Address Format & 50 & 57 & 0.88 & 0.22 & 0.19 & 0.52 \\ \hline Specification & 4 & 4 & 1.00 & 6.17 & & 0.75 \\ Address Features & 18 & 19 & 0.95 & 6.69 & & 0.64 \\ Header & 9 & 13 & 0.69 & 6.05 & & 0.34 \\ Mobile IPv6 & 19 & 21 & 0.90 & 5.76 & & 0.49 \\ \hline IPsec \& ICMPv6 & 59 & 69 & 0.86 & 0.14 & 0.12 & 0.40 \\ \hline ICMPv6 Specification & 5 & 6 & 0.83 & 6.03 & & 0.67 \\ Neighbor Discovery & 7 & 11 & 0.64 & 6.59 & & 0.36 \\ Path MTU Discovery & 1 & 1 & 1.00 & 6.00 & & 0.60 \\ Multicast Listener Discovery & 4 & 5 & 0.80 & & & 0.32 \\ IPsec & 10 & 13 & 0.77 & 6.93 & & 0.37 \\ IKEv2 & 13 & 13 & 1.00 & 5.66 & & 0.40 \\ Cryptographic Methods & 19 & 20 & 0.95 & 5.69 & & 0.38 \\ \hline DHCPv6, Autoconfiguration & 12 & 14 & 0.86 & 0.21 & 0.18 & 0.40 \\ \hline Stateless Autoconfiguration & 2 & 2 & 1.00 & 6.66 & & 0.70 \\ DHCPv6 & 10 & 12 & 0.83 & 6.28 & & 0.35 \\ \hline Routing \& DNS & 29 & 40 & 0.73 & 0.24 & 0.17 & 0.37 \\ \hline DNS Specification & 1 & 3 & 0.33 & 6.03 & & 0.33 \\ Security Issues & 8 & 9 & 0.89 & 6.62 & & 0.49 \\ DNSSEC & 5 & 9 & 0.56 & 5.69 & & 0.27 \\ Multihoming & 6 & 7 & 0.86 & 5.00 & & 0.43 \\ Routing Protocols & 4 & 5 & 0.80 & 6.03 & & 0.36 \\ PIM & 5 & 7 & 0.71 & 4.62 & & 0.29 \\ \hline Transition Methods & 24 & 33 & 0.73 & 0.20 & 0.15 & 0.41 \\ \hline Dual Stack & 4 & 4 & 1.00 & 7.38 & & 0.60 \\ Tunneling & 12 & 16 & 0.75 & 6.38 & & 0.45 \\ Translation & 8 & 13 & 0.62 & 6.21 & & 0.29 \\ \hline Totals & & **174** & **213** & **0.82** & & **0.81** & **0.43** \\ \hline \end{tabular}
\end{table} 
Table 6: NIST Content Completeness and Depth. Columns: A = Count of covered RFCs; B = Count of relevant RFCs; C = Completeness; D = Weight/Importance Rating; E = Weighted Completeness (A * D); F = Depth. the category _Specification and Address format_ is well covered, which also aligns with the importance of its subcategories. IPsec and ICMPv6:IPsec and ICMPv6 are also well covered by the NIST guide. 59 out of 69 relevant RFCs are mentioned, which results in a completeness of 0.86 or 86%. Except for the subcategories _Path MTU Discovery_ and _IKEv2_, all other of the seven subcategories miss some points. The lowest scores pertain to _Neighbor Discovery_ (4 missing) and _IPsec_ (3 missing). Again, 0.86 is a very good result and shows that very many of the relevant RFCs are at least mentioned. The depth of this category is at 0.4 (low). Many of the subcategories have a very low depth. Only _Path MTU Discovery_ and _ICMPv6 Specification_ achieved a depth of 0.6 or higher. Other subcategories should have been covered in more detail as they received high importance ratings in the survey. These are in particular _Neighbor Discovery_ and _IPsec_. _Neighbor Discovery_ has an importance rating of 6.59 but only has a depth of 0.36 and thus is not described sufficiently. _IPsec_ is rated even higher for importance (6.93) and also achieves only a depth of 0.37 (less than low). As one of the most important topics, this clearly shows a deficit and should be considered for improvement. The other subcategory scores for depth are well aligned to the importance rating they achieved. In general, this category is covered to a large extent in the NIST guide, but focus for detailed coverage should be shifted to the more important topics. DHCP and Autoconfiguration:This smaller category with only 14 relevant RFCs is covered well by the NIST guide. 12 out of 14 RFCs are at least mentioned in the guide. The two missing points are coming from the subcategory _DHCPv6_. The resulting completeness is 0.86 or 86% and thus a good result. Depth of this category is only 0.4. This results from a very low depth of the subcategory _DHCPv6_ (0.35) and a high depth of _Stateless Autoconfiguration_ (0.70). The depth of _DHCPv6_ is too low in relation to its importance rating of 6.28 and should be given more attention. Generally, the coverage of this category is good with room for a few improvements in depth.