Research And Application About Protocol Analysis Technology In Intrusion Detection System Based On IPv6

Intrusion detection system (IDS) is an active security-defensive mechanism. It can search intrusive signal and offer secure protection against external-attack, internal-attack and inaccurate operation. It can log and forbid network action, actually IDS is spread of firewall. Protocol analysis technology resolve several main problems: accurateness, capability, service, integration with other security system. It make use of regulation of network protocol to find the exist of attack, so protocol analysis technology relates with the format of the protocol nearly. However, because of the bug of IPv4, the replacement of IPv6 has been inevitable trend. So protocol analysis technology has to change according to the new format of IPv6 protocol. At the same time the method of IDScapturing data-packet must be modified.In this paper, we research protocol analysis technology in intrusion detection system based on IPv6 and put forward the resolvent for above problems. This paper carries through profitable attempt for transplant of IDS.