关于IPv6的安全性分析

Security analysis on IPv6

互联网的急速发展,使得IPv4地址空间逐渐不能满足使用需求,许多国家开始部署IPv6的研究工作。我国在2017年11月份由国务院印发了《推进互联网协议第六版(IPv6)规模部署行动计划》,为IPv6相关研究工作的开展提供了方向指导和制度保障。虽然目前IPv6用户数量在不断增加,但由于技术不够成熟,配套体系不够完善,导致IPv6在实际应用中仍然存在诸多需要改进的地方,其中安全性问题是用户普遍关心的问题。文章首先概述了IPv4与IPv6的差异,提出了IPv6面临的安全威胁,随后分别从加强访问控制、严格网络接入认证、做好协议安全防护等方面,就如何确保IPv6应用安全展开了简要分析。

The rapid development of the Internet has made the IPv4 address space gradually unable to meet the needs of use. Many countries have begun to deploy IPv6 research work. In November 2017, China issued the Action Plan for Promoting the Scale of Internet Protocol Version 6(IPv6)by the State Council, which provided direction guidance and system guarantee for the development of IPv6 related research work. Although the number of IPv6 users is increasing, the technology is not mature enough, and the supporting system is not perfect. As a result, there are still many areas for improvement in the practical application of IPv6. The security problem is a common concern of users. The article first outlines the differences between IPv4 and IPv6, and the security threats faced by IPv6. Then it analyzes how to ensure the security of IPv6 applications from aspects such as enhanced access control, strict network access authentication, and protocol security protection.