Research On IPv4/IPv6 Security Tools And Software Implementing

This paper is based on "The research of IPv6 information filter technique" subject. With the analysis of the existing security tools, I propose an advanced cooperate framework of security scanner, intrusion detection tools and firewalls.The content of this paper is focus on: security scanner, intrusion detection tools and firewalls. Especially on IPv6 security scanner and IPv6 intrusion detection tools which I have taken part in. Arm at the LAN vulnerability in the periods of transition from IPv4 to IPv6, we rebuild the detect engine and plugms database of NESSUS to improve the IPv6 vulnerability scan ability. Arm at the increase of network traffic and change of network protocol in the transition periods, we adopt distributed architecture to improve the IDS (intrusion detection system) detect ability and use load balance policies to optimize IDS performances. As to firewalls, this paper analyzes the functional pressure and filter limitation of current centralized systems and presents a practical distributed firewall modal.In the last, this paper build an advanced cooperate framework of security scanner, intrusion detection tools and firewalls. It implements some new designs so as to overcome faults of past systems and detect attacks more accurately and efficiently.