IPv6的安全机制及其对现有网络安全体系的影响

IPv6不但解决了当今IP地址匮乏的问题,并且由于它引入了加密和认证机制,实现了基于网络层的身份认证,确保了数据包的完整性和机密性,因此,可以说IPv6实现了网络层安全。但是,这种安全不是绝对的。并且由于IPv6的安全机制,给当前的网络安全体系带来了新的挑战,致使许多在现有的网络中对保护网络安全中起着重要作用的工具受到巨大的冲击,急需安全专家进一步研究和积累经验,尽快找出合适的解决方法。

IPv6 Security and Its Impact to Today''''s Network Security Architecture

IPv6(Internet Protocol version6)is the successor to IP v4,which is the current IP protocol version used on the In-ternet.IPv6not only eliminate the address exhaustion problem,but also improve IP layer securi ty because it supports two security mechanisms ,Authentication Header(AH)and Encapsulating Security Payload(ESP).But the secu-rity mechanisms of IPv6 also make great impact to today's network security architecture.Many of today's network secu-rity tools such as filter firewall,NAT firewall and network base d intrude detection system can not work with IPv6.The security experts have to find new way to protect the security of the next generation Internet.