IPv6安全脆弱性研究

IPv6作为可控、可信、可扩展的下一代网络核心协议已经从试验阶段走向实际应用。普遍认为IPv6因有IPSec而比IPv4更安全，但IPv6网络在实际部署中往往没有实施IPSec。IPv6协议在没有IPSec时的安全性，特别是过渡时期和IPv6协议自身的安全性问题值得深入研究。主要研究了IPv6在没有IPSec时的安全性。首先对IPv6网络中的攻击和安全问题进行了分类和概述，然后分两部分重点讨论了过渡时期的安全性和IPv6特有的安全性，并给出了一些攻击和漏洞的防护建议。

Study on Security Vulnerability of IPv6

IPv6,the key protocol of the controllable,trustable and scalable next generation network,has evolved from experimental phrase to real-live application phase.Because IPv6 mandates the inclusion of IPSec,it is taken for granted that IPv6 is more secure than IPv4.In the reality,however,IPv6 is usually deployed without cryptographic protections of any kind.The security of IPv6 without IPSec, especially the security in the transition phase and the native security of IPv6,is worth stu-dying.This paper mainly studied the vulnerability of IPv6 without IPSec.Firstly,the attacks and vulnerabilities in IPv6 network were classified and described in general.Then,the vulnerability in the transition stage and the native vulnerability of IPv6 were discussed in detail as a separated part respectively.Some suggestions for defending against the threats or reinforcing the system were given.