一种基于子网跳变的IPv6 MTD模型

AN IPV6 MTD MODEL BASED ON SUBNET HOPPING

针对IPv6网络通信中通信节点及通信数据的安全性问题,受跳频通信启发,提出一种基于子网跳变的IPv6 MTD模型。该模型提出一种全Hash随机地址生成算法,子网前缀和接口标识同时跳变,保证地址随机性。设计一种基于"预公告"和"后清除"两个策略相结合的跳变机制,保证通信持续性。理论分析与实验结果表明,该模型可有效抵抗节点追踪、DDo S、流量截获,保护网络安全。

Aiming at the security issues of communication nodes and data in IPv6 network, an IPv6 MTD model is proposed based on subnet hopping, which is motivated by the idea of frequency hopping communication. The model introduces an all Hash random address generation algorithm to ensure the address randomization, in which subnet prefix and interface identifier hop simultaneously. Besides, this model designs a hop mechanism based on the combination of the ＂pre-announce＂ and ＂post-purge＂ strategies, ensuring the continuance of communication. Theoretical analysis and experimental results show that this model can effectively resist node tracking, DDoS and traffic interception, and protect network security.