IPv6邻接点欺骗攻击应急响应处理的研究与实现

Research on Resoponse System of IPv6 Neighbor Discovery Spoofing Attack and Its Design

邻居发现协议(Neighbor Discovery Protocol,NDP)作为IPv6协议的重要组成部分,取代了IPv4中的ARP协议、ICMP路由发现和ICMP重定向功能。文章分析了NDP存在的安全问题,尤其是伪造IP地址攻击,提出了一种针对邻居发现欺骗攻击的主动响应方法,在此基础上,实现了一个IPv6邻接点攻击应急响应原型系统,并进行了实验和分析。

NDP(Neighbor Discovery Protocol,NDP) is an important part of IPv6 protocol,which corresponds to a combination of ARP protocol,ICMP router discovery and ICMP redirect function in IPv4.This paper analyses security problem that may be subjected to NDP,especially IP address spoofing attack.At last,this paper puts forward a initiative response to neighbor discovery attack.