基于IPv6的网络入侵检测系统的设计与实现  

Design and realization of NIDS based on IPv6

作　　者：肖长水[1] 谢晓尧[2] 

机构地区：[1]苏州市职业大学计算机工程系,江苏苏州215104 [2]贵州师范大学,贵州贵阳550001

出　　处：《计算机工程与设计》2007年第18期4380-4382,4389,共4页Computer Engineering and Design

基　　金：贵州省科技基金项目(黔科合J(2005)2105号)。

摘　　要：通过对入侵检测技术和IPv6协议的研究,设计并实现了基于IPv6协议的网络入侵检测系统。介绍了入侵检测技术与IPv6的新特性,详细阐述了系统的总体框架设计、入侵规则设计以及AC_BM模式匹配算法的应用。该系统基于Linux操作系统开发实现,采用了C语言中的多线程技术和Linux平台下的GTK+技术,以提高系统的运行效率和人机的可交互性。Through studying the intrusion detection technology and IPv6 protocol, the network intrusion detection system based on IPv6 is designed and realized. The intrusion detection technology and the new characteristics of IPv6 are introduced, and the main flame design of the system, the intrusion rules design and the application of AC_BM pattern matching algorithm are expatiated. The system is developed and realized under the network condition based on Linux platform, in which the multi-thread technology of C programming and GTK＋technology are used to improved running efficiency and mutual effect between user and computer.

关 键 词：IPV6协议 IPSEC协议 入侵检测 AC-BM算法 GTK+技术 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]