基于IPv6的下一代网络安全问题的探讨  

Analysis on the security of next generation Internet based on IPv6

作　　者：丁文飞[1] 孙会楠[1] 邢彦辰[1] 马德仲[2] 

机构地区：[1]哈尔滨华德学院,黑龙江哈尔滨150025 [2]哈尔滨理工大学,黑龙江哈尔滨150080

出　　处：《计算机安全》2014年第9期45-48,共4页Network & Computer Security

摘　　要：作为新一代互联网技术,IPv6技术在解决IPv4存在不足的同时,也带来了新的安全隐患。因此,解决下一代互联网的网络安全问题迫在眉睫。主要从IPv6协议优势出发,分析存在优势的同时也存在安全隐患。重点探讨实名制IPv6地址分配机制、报头安全漏洞保护方案及基于DSTM方案的过渡机制等三种安全策略。通过对安全策略的设计原理及其所能解决的安全隐患的分析,论证了这三种安全策略能够很好地解决下一代互联网安全问题,为用户提供安全、诚信的网络社会。As a new generation of Internet technology, IPv6 can cover the shortages of IPv4, at the same time, ？also bring？some new security threats. Therefore, ？it is pressing to solvevthe network. security problem of the next generation Internet. This paper analyzed the advantages and security threats of IPv6 and focused on three k.inds of？safety？strategies, the IPv6？address assignment mechanism in real-name system, the beadervsecurity vulnerabilitysprotection scheme andvtbe transitionsrrecnansrn based on DSTM scheme. Through the analysesvon design principles of these satetyvstrategies and security threats addressed by them, it is demonstrated that these security strategies can be good solutions to security issues of the next generation Internet for providing users with the security and integrity network. society.

关 键 词：IPV6 下一代互联网 实名制 安全漏洞 DSTM方案 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]