|
|||||
|
|
| 基于动态规则的IPv6入侵检测系统研究与实现 | |
| 引用本文： | 甘勇,吕国宁,马芳,钱德沛.基于动态规则的IPv6入侵检测系统研究与实现[J].计算机工程与设计,2008,29(23). |
| 作者姓名： | 甘勇 吕国宁 马芳 钱德沛 |
| 作者单位： | 1. 西安交通大学,计算机系,陕西,西安,710049;郑州轻工业学院,计算机系,河南,郑州,450002 2. 郑州轻工业学院,计算机系,河南,郑州,450002 3. 西安交通大学,计算机系,陕西,西安,710049 |
| 基金项目： | 河南省自然科学基金项目，河南省科技攻关计划基金项目 |
| 摘 要： | 分析了snort规则检测及Snort入侵检测系统工作原理,结合IPv6协议本身的特点及其安全性,提出一种IPv6动态规则匹配机制,通过增加选项索引链表,对规则匹配的次序进行动态调整,实现了一个快速高效的IPv6入侵检测系统.实验结果表明,该系统可有效地检测IPv6各种攻击,平均每包检测速度提高了约12.53%. |
| 关 键 词： | 网络安全 入侵检测 规则匹配 动态规则 |
Research and implementation of IPv6 IDS based on dynamic rule |
|
| GAN Yong,L Guo-ning,MA Fang,QIAN De-pei.Research and implementation of IPv6 IDS based on dynamic rule[J].Computer Engineering and Design,2008,29(23). | |
| Authors: | GAN Yong L Guo-ning MA Fang QIAN De-pei |
| Affiliation: | GAN Yong1,2,LU Guo-ning2,MA Fang2,QIAN De-pei1(1.Department of Computer Science,Xi'an Jiaotong University,Xi'an 710049,China,2.Department of Computer Science,Zhengzhou University of Light Industry,Zhengzhou 450002,China) |
| Abstract: | Based on the analysis of Snort's rule and the principle of instruction detection system for snort, combined withthe characteristic and security mechanisms of IPv6, a dynamic rule-matching mechanism for IPv6 is put forward.In order to adjust the sequence of rule-matching dynamically, a chain of the option index is added.The quickness and efficiency of the instruction detection system for IPv6 is carried out.The experiment shows that the system not only detects kinds of attacking for IPv6, but improves detect... |
| Keywords: | IPv6 |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ | |