| Network security is a margin discipline that integrates many disciplines with the penetration of network technology into people's daily life, network security is becoming more and more important and is the main project concerned with national security and society welfare. Intrusion detection technology, which is supplemental to firewall, helps system handle network attack, extends security management ability of network manager, and improves the integrality of network information security infrastructure. Therefore, intrusion detection is an important element of network security technology.Mean while, Although IPv6 specification has abundant IP address spaces, convenient to network configuration, and excellent expansibility. Meanwhile, it is good in mobility, Quality of Service, and security. But, there are still a lot of potential safety hazards and network attacks in the IPv6 network. Consequently, the research on the IPv6 network IDS is greatly essential yet. Currently, there is no IDS system that supports IPv6.Therefore, it is full of academic value and scientific research significance if we use IPv6 protocol in IDS and implement the function of web-based remote management.The thesis is organized as follows.Firstly,the paper analysis and research the next generation Internet protocol IPv6 and potential security issues, the principle of intrusion detection technology and related technology.in the IPv6 environment and characteristics of new issues to study the intrusion detection system in the improvement of IPv6, Secondly,on the open source snort intrusion detection system carried out research and analysis and to improve its application and IPv6 networks. Finally, this thesis designs distributed IDS for IPv6 network and implements terminal IPv6 NIDS.The test results indicate that this system can detect some IPv6 network attacks and generate alerts.This thesis will help to further research of IPv6 network intrusion detection technology. |
PDF Full Text Request