基于IPv4/IPv6双协议栈的联动防御系统  

The Linked Prevention System Based on IPv4/IPv6 Dual Stack

作　　者：杨吉喆[1] 王源[2] 陆建德[2] 

机构地区：[1]苏州大学计算机学院,215006 [2]江苏省计算机信息处理技术重点实验室,江苏苏州215006

出　　处：《微计算机信息》2011年第4期174-176,共3页Control & Automation

摘　　要：论文研究IPv4/IPv6共存环境下的安全解决方案,提出了基于IPv4/IPv6双协议栈的联动防御系统。系统设计了改进的快速捕帧算法,全面考虑和应对IPv6引入后的各类新安全威胁并设计了相应的处理策略,系统还自行设计了基于XML的联动控制交互协议,反馈控制防火墙Netfilter修改过滤规则,实现防火墙与入侵检测的实时联动防御,很好地检测与阻断了IPv4/IPv6共存环境下的入侵行为。This paper makes research on the secure scheme under IPv4/IPv6 co-existing environment and proposes a linked prevention system based on IPv4/IPv6 dual stack. The fast frame capture algorithm has been developed in the system. Considering comprehensively to various new security threats introduced by IPv6, the system leads -in and designs lots of new corresponding strategies, moreover, it designs a linked control interactive protocol based on XML, whereby the detection system feedbacks to and controls Netfilter firewall that modifies filtering rules, so as to realize real-time linked prevention with the firewall and intrusion detection mechanism. The scheme has done better to detect and block the behavior of intrusion under IPv4/IPv6 co-existing environment.

关 键 词：双协议栈 IPV6 NETFILTER 入侵检测 联动防御 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]