Research On Key Security Technology For Next Generation Network Based On IPv6

It is an inevitable tendency that IPv6 will substitute IPv4 as the next generation Internet protocol with rapid development of Internet and speedy exhaustion of IPv4 addresses. IPv6 and IPv4 will coexist for a long time for the deployment of IPv6 will advance gradually. IPv6 integrates IPSec into itself, and therefore IPSec impenetrates all fields of IPv6 and provides security for IPv6. But security risks and threatens are also introduced with new characteristics of IPv6 and the upgrade of IPv4 to IPv6. Simultaneously, Some intrinsic safety problems are not solved completely in IPv6 networks compared with traditional IPv4 networks. On all accounts, it is significant to study the key security technology of IPv6 based on next generation network.This paper firstly describes the concept of IPv6 and its network security infrastructure. And then the transition mechanism from IPv4 to IPv6 is researched. A security policy is put forward aimed at transition scheme of DSTM. The development direction of traditional network security tools in the next network based on IPv6, such as firewall, IDS, network security audition, network leak scanning and some other security tools. This paper focuses on Data Mining technology in R&D of network security tools. Dynamic network security recovery system based in IPv6 is build up combined with the fact network topology. VPN based in IPSec is realized in the OS of Linux in the library environment of native IPv6 network and the security has been tested and analyzed.