IPv6 WLAN安全网关设计

Design of the Security Gateway in IPv6 WLAN

IPv6强大的寻址方案和对移动性的支持,使其在WLAN中的应用成为一种趋势。WLAN为用户提供了便捷接入的同时,也带来相较于有线网络更大的安全威胁,IPv6的邻居发现协议和自动配置功能等这些特点使得WLAN的接入安全变得更为复杂。设计一个IPv6 WLAN环境下的安全网关,能够检测到网络中潜在的漏洞和威胁,通过搭建实验环境,并对未授权接入、DAD DOS攻击和重定向攻击三种安全威胁进行了仿真,实验结果证明该安全网关的有效性。

IPv6 will be widely used in WLAN because of its powerful addressing scheme and mobility. Along with the conve-nient Internet access of WLAN, it is more dangerous compared to wired network. The ND and auto configuration features of IPv6 make the access of WLAN become more complexity. We design a security gate of IPv6 WLAN to detect the underlying threat, and construct an experiment environment. Unauthorized accesses, DAD DOS attacks, and redirect attacks are simulated and evaluated to prove the effectiveness of our security gateway.