基于包验证的面向IPv6翻译机制的IP追溯方法  

Packet verification based traceback method for IPv6 translation mechanism

作　　者：朱田[1,2] 田野[1,2] 马迪[1,2] 毛伟[1,2] 

机构地区：[1]中国互联网络信息中心,北京100190 [2]中国科学院计算机网络信息中心,北京100190

出　　处：《计算机应用》2013年第4期926-930,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61005029)

摘　　要：IP地址安全一直是互联网面临的核心问题,在IPv6过渡时期,多种IP地址分配方式,IPv6过渡技术和IP欺骗引起的IP地址不确定性向IP地址资源安全提出了挑战。新兴IPv6家庭网络、小企业网、校园网与传统IPv4网络互联互通的IPv6翻译场景是典型的IPv6过渡场景,然而,传统的IP追溯技术无法直接应用于IPv6翻译场景。基于这种现状,提出一种IP追溯方案来解决IPv6翻译场景下的IP追溯问题,该方案打通了IPv6翻译网关,实现了目的网络对源网络的可知性,进而保证了互联网的IP地址资源安全。IP address security is always a critical Internet security issue.As the transition from IPv4 to IPv6,multiple allocation modes of IP address,IPv6 translation techniques and IP spoofing increase the uncertainty of IP address of the host and the host has multiple IP addresses,which makes IP address resource more insecure.The emerging IPv6 home network,small enterprise network and campus network interconnect with traditional IPv4 network,which is typical and inevitable IPv6 translation scenario,and traditional IP traceback techniques cannot directly be applied to these scenarios.Therefore,this paper presented a new approach to solve IP traceback issue under these scenarios,which is able to go across the gateway that interconnects between IPv4 network and IPv6 network,and makes the destination network knowable for the source network.The traceback method guarantees the Internet fundamental resource safe.

关 键 词：IP地址管理 IP追溯 IPV6过渡 数据包验证 IPv6翻译机制 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]