Research of Fragment Mechanism Security in IPv6 Network Protocol

Xianglin Wang; Chen Zhu; Dongmei Sun; Mingyue Li; Qingzi Shen

doi:10.3969/j.issn.1000-0801.2013.10.019

您当前的位置：

首页 >

文章列表页 >

Research of Fragment Mechanism Security in IPv6 Network Protocol

research and development | 更新时间：2024-06-05

- Research of Fragment Mechanism Security in IPv6 Network Protocol
- Telecommunications Science Vol. 29, Issue 10, Pages: 108-113(2013)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.1000-0801.2013.10.019
  CLC：
- Published Online：2013-10，
  
  Published：20 October 2013
- 稿件说明：
移动端阅览
Xianglin Wang, Chen Zhu, Dongmei Sun, et al. Research of Fragment Mechanism Security in IPv6 Network Protocol[J]. Telecommunications science, 2013, 29(10): 108-113.
DOI：

Xianglin Wang, Chen Zhu, Dongmei Sun, et al. Research of Fragment Mechanism Security in IPv6 Network Protocol[J]. Telecommunications science, 2013, 29(10): 108-113. DOI： 10.3969/j.issn.1000-0801.2013.10.019.

摘要

以开源Snort 平台为基础，探讨IPv6网络的分组分段机制，对利用IPv6分组分段来攻击网络的行为进行了研究。针对其中IPv6过小分组分段、重叠分段等问题提出了相应的应对措施，设计并实现了针对分段漏洞进行检测的入侵检测机制。通过实验表明，所设计的入侵检测机制能够检测相关异常的IPv6分段分组，对Snort支持IPv6功能进行了改进和优化。

Abstract

Based on open source Snort platform

the packet block mechanism in IPv6 network was discussed.The behavior using IPv6 packet fragment to attack network was studied.Against to the problems

such as too little for IPv6 packet segment

overlapping section and so on

it put forward the corresponding countermeasures.The intrusion detection system were designed and implemented for piecewise leak testing.The experiments show that the design of intrusion detection system can detect the abnormal IPv6 packet

and Snort to support for IPv6 function was improved and optimized.

关键词

Keywords

references

Deering S , Hinden R . Internet Protocol Version 6（IPv6） Specification . RFC2460 , 1998

王相林 . IPv6核心技术 . 北京：科学出版社， 2009

Target-based fragmentation reassembly . http://www.snort.org/assts/165/target based frag.pdf http://www.snort.org/assts/165/target based frag.pdf

RFC5722 . Handling of Overlapping IPv6 Fragments , 2009

RFC6145 . IP/ICMP Translation Algorithm , 2011

THC IPv6 attack tool kit . http://freeworld.thc.org/thc-ipv6/ http://freeworld.thc.org/thc-ipv6/

Scapy . https://www.secdev.org/projects/scapy/ https://www.secdev.org/projects/scapy/

Views

583

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Optimal approach of suppressing WSN malware propagation based on cloud computing and dynamic Bayesian game

Related Author

Shigen SHEN

Sheng FENG

Haiping ZHOU

Longjun HUANG

Keli HU

Qiying CAO

Related Institution

Department of Computer Science and Engineering, Shaoxing University

College of Computer Science and Technology,Donghua University

⁰