Intrusion Detection System Under IPv6 Environment

When the network security becomes more and more important to all kinds of people,the technology of firewall and IDS(Intrusion Detection System) have been more andmore widely studied and applied. IDS can remedy the shortcoming of the firewall,that is, it can detect the intrusion behavior from the network with less expensive costand adopt the protective method at the beginning of the intrusion. In a word, theintrusion detection is a kind of very important security technology of network.As the next generation of Internet Protocol, IPv6 not only can perfectly solve theproblem that IP address will be exhausted very fast,but also is stronger and more-efficient than IPv4 on such a lot of performance as the management, controls, net-work security, etc.. But it is still in the experimental phase now. Therefore it is verymeaningful to develop the intrusion detection system under IPv6 environment now.The theme of this thesis is the new-type intrusion detection technique under IPv6environment. It discusses emphatically how to detect various kinds of networkintrusion under the environment that IPv4/IPv6 coexists. This thesis is mainly in-volved in four modules listed below:The module of protocol analysis engine supporting both IPv4 and IPv6.The module of pre-processor of detection engine.The module of disposal of characteristic rules based on the attacks of IPv6loopholes.The module of detection engine.Firstly, This thesis introduces source, background and domestic and internationalcurrent situation of the project in the part of the foreword.Secondly, this thesis introduces IPv6 protocol and IDS also. From presenting maindifference between IPv6 and IPv4 to start with at first, then it tells IPv6 addressingarchitecture and security architecture in detail. And then it also discusses the tacticsthat IPv4 carries out the transition to IPv6 as well as the state of development of IPv6and it's developing direction. And then this thesis summarizes the technology of IDS...