摘要
目前的网络是基于IPv4的,但是IPv4的种种局限性限制了网络的持续高速发展。IPv6较IPv4有很多优势,例如:巨大的地址空间,自动配置机制,简化的报头结构,内置IPSec,扩展报头,以及对流标签的支持等等。目前对IPv6的安全问题研究主要集中在协议本身的安全,对上层的安全问题无法保障。就IPv6提出了一种基于协议分析方法的入侵检测模型。设计出的系统可以很好的应用于IPv6环境中,还可以适用于IPv4到IPv6过渡时期。
Current internet is based on IPv4 protocol, but the limitation of IPv4 put obstacle to the development of internet. IPv6 is carried out as an alternative of IPv4, IPv6 has many features such as：128 bit address, auto-configuration mechanism, simple header format,using IPsec, extend header, support of flow label. Presently, researches of IPv6 security focus on security of the protocol itself, but, the protocol can just produce the security on network layer,and can do nothing to the higher layers. This make it very important to build the positive protection system. The article introduces a new intrusion detection system base on IPv6 protocol analysis, the system can operates on IPv4 and IPv6 environments well.
出处
《计算机应用与软件》
CSCD
2009年第2期280-282,共3页
Computer Applications and Software
关键词
入侵检测
网络安全
协议分析
Intrusion detection Network security Protocol analysis
