基于动态规则的IPv6入侵检测系统研究与实现  

Research and implementation of IPv6 IDS based on dynamic rule

作　　者：甘勇[1,2] 吕国宁[2] 马芳[2] 钱德沛[1] 

机构地区：[1]西安交通大学计算机系,陕西西安710049 [2]郑州轻工业学院计算机系,河南郑州450002

出　　处：《计算机工程与设计》2008年第23期5933-5935,5942,共4页Computer Engineering and Design

基　　金：河南省自然科学基金项目(0611054800);河南省科技攻关计划基金项目(0623051200)。

摘　　要：分析了snort规则检测及Snort入侵检测系统工作原理,结合IPv6协议本身的特点及其安全性,提出一种IPv6动态规则匹配机制,通过增加选项索引链表,对规则匹配的次序进行动态调整,实现了一个快速高效的IPv6入侵检测系统。实验结果表明,该系统可有效地检测IPv6各种攻击,平均每包检测速度提高了约12.53%。Based on the analysis of Snort＇s rule and the principle of instruction detection system for snort, combined with the characteristic and security mechanisms of IPv6, a dynamic rule-matching mechanism for IPv6 is put forward. In order to adjust the sequence of rule-matching dynamically, a chain of the option index is added. The quickness and efficiency of the instruction detection system for IPv6 is carried out. The experiment shows that the system not only detects kinds of attacking for IPv6, but improves detection speed about 12.53%.

关 键 词：网络安全 入侵检测 规则匹配 IPV6 动态规则 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]