基于动态规则的IPv6入侵检测系统研究  

Research of IPv6 IDS based on Dynamic rule

作　　者：甘勇[1] 吕国宁[1] 马芳[1] 郑富娥[1] 

机构地区：[1]郑州轻工业学院计算机与通信工程学院,郑州450002

出　　处：《微计算机信息》2008年第12期78-80,共3页Control & Automation

基　　金：河南省自然科学基金项目(0611054800);河南省科技攻关计划项目(0623051200)

摘　　要：本文在分析snort规则检测及Snort入侵检测系统工作原理的基础上,结合IPv6协议本身的特点及其安全性,提出一种IPv6动态规则匹配机制,通过增加选项索引链表,对规则匹配的次序进行动态调整,实现了一个快速高效的IPv6入侵检测系统。实验表明,该系统可有效地检测IPv6各种攻击,平均每包检测速度提高了约12.53%。Based on the analysis of Snort’s rule and the princIPle of instruction detection system for snort,combined with the char-acteristic and security mechanisms of IPv6,this paper puts forward a dynamic rule-matching mechanism for IPv6. In order to adjust the sequence of rule-matching dynamically,it adds a chain of the option index. It carries out the quickness and efficiency of the in-struction detection system for IPv6. The experiment shows that the system not only detects kinds of attacking for IPv6,but impro...

关 键 词：入侵检测 规则匹配 IPV6 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]