欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
针对IPv6路由扩展首部漏洞所带来的安全问题,设计并实现了一种适用于IPv6路由扩展首部的入侵检测机制。以开源入侵检测系统Snort为基础,不改变其原有的数据包检测规则结构,采用IPv6协议分析技术对Snort数据包解析模块进行改进。设计实现了支持IPv6路由扩展首部的解析模块、内部网络受保护系统模块（IPSM）,并给出了实验验证过程和结果分析。实验证明该设计方案能准确检测出利用IPv6路由扩展首部漏洞所实施的攻击行为。
英文摘要：
Aiming at the security issues caused by holes of IPv6 routing extension header,this paper designed and implemented an intrusion detection mechanism applicable to IPv6 routing extension header.Basing on the open source intrusion detection system Snort,instead of changing the structure of the existing Snort detection rules,using the technology of IPv6 protocol analysis,improved the packet analysis module of Snort.It designed and implemented the module supporting for parsing IPv6 routing extension header and the internal protected system module.It also gave the process of the proving experiment and the analysis of result.The experiment proves that the design scheme in this paper can exactly detect the attack behaviors which use holes of IPv6 routing extension header.
同期刊论文项目
同项目期刊论文
期刊信息
位置：