摘要
论文研究IPv4/IPv6共存环境下的安全解决方案,提出了基于IPv4/IPv6双协议栈的联动防御系统。系统设计了改进的快速捕帧算法,全面考虑和应对IPv6引入后的各类新安全威胁并设计了相应的处理策略,系统还自行设计了基于XML的联动控制交互协议,反馈控制防火墙Netfilter修改过滤规则,实现防火墙与入侵检测的实时联动防御,很好地检测与阻断了IPv4/IPv6共存环境下的入侵行为。
This paper makes research on the secure scheme under IPv4/IPv6 co-existing environment and proposes a linked prevention system based on IPv4/IPv6 dual stack. The fast frame capture algorithm has been developed in the system. Considering comprehensively to various new security threats introduced by IPv6, the system leads -in and designs lots of new corresponding strategies, moreover, it designs a linked control interactive protocol based on XML, whereby the detection system feedbacks to and controls Netfilter firewall that modifies filtering rules, so as to realize real-time linked prevention with the firewall and intrusion detection mechanism. The scheme has done better to detect and block the behavior of intrusion under IPv4/IPv6 co-existing environment.
出处
《微计算机信息》
2011年第4期174-176,共3页
Control & Automation
