IPv6网络协议中邻居发现安全问题的研究  

Research of Neighbor Discovery Security in IPv6 Network Protocol

作　　者：王相林[1] 朱晨[1] 孙冬梅[1] 李明月[1] 沈清姿[1] 

机构地区：[1]杭州电子科技大学计算机学院,杭州310018

出　　处：《电信科学》2013年第7期43-48,共6页Telecommunications Science

基　　金：国家自然科学基金资助项目(No.61273075;No.61172133);浙江省大学生新苗人才计划科技成果推广基金资助项目(No.2012R407057)

摘　　要：针对IPv6自身暴露出来的安全缺陷,以开源Snort平台为基础进行了相关研究。依据IPv6的特征,采用IPv6分析技术,针对当前开源入侵检测系统Snort中无法检测IPv6网络中邻居发现协议攻击行为的问题,研究与设计了能对IPv6中邻居发现协议攻击进行检测的HDU_IPv6_IDS入侵检测系统。According to the security flaws exposed by IPv6, the research based on open source Snort platform was introduced. The research was based on the characteristics of the IPv6 and adopted IPv6 analysis technology. Aiming at solving the problem that the attack behavior of discovery protocol for IPv6 network neighbors cannot be detected in the current open source intrusion detection system Snort. The HDU_IPv6 IDS intrusion detection system was researched and designed which could detect the attacks of neighbor discovery protocol in IPv6.

关 键 词：IPV6 入侵检测系统 邻居发现协议 SNORT 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]