| The current core protocol IPv4of the Internet is designed in the1970s. In terms of network size and transmission speed from the point of view, The disadvantages of IPv4have already exposed gradually. The most important problem is that the IP address of32bit is not enough. Thus, IETF proposed the next generation of IP-IPv6on June1992. But the existence of network intrusion is inevitable, how to design and implementation a network intrusion detection system supporting IPv6protocol on the characteristic attack is imminent in order to protect network security.This thesis mainly describes design and implementation of a intrusion detection system supporting IPv6protocol. The system takes up protocol analysis techniques, uses C language to programme, and detect characteristic attack on the IPv6network in Vc++6.0development environment by drawing up detection theory and technology of a lightweight intrusion detection system-Snort. In particular, The system analyses basic header and extension headers of IPv6packet, makes use of the regularity of the agreement, takes up pattern matching algorithm to achieve the rapid detection of attack on characteristics, which also greatly improves the accuracy of the system.Firstly, this thesis describes IPv6protocols and intrusion detection knowledge, and introduces basic header and extended headers of IPv6protocol and the classification of intrusion detection. Secondly, this thesis introduces design and implementation of intrusion detection system supporting IPv6in details, including specific implementation of packet capture, protocol analysis, intrusion detection and output modules. Again, this system is verified through experiments on packet capture, analysis, testing and other major functions. Finally, this thesis summarizes the work and puts forward the prospects. |
