The Research On The Alert Detect And Analysis Of IPv6 LAN Attack

As IPv4 is not fit for the use of current network applications, IPv6 is playing a very important role in nowadays. Though IPv6 solves several problems like "short of address", there are still some leaks in IPv6 protocols. And attacks which use the leaks appear to be more and more. In this paper, the theory of IPv6 and ICMPv6 protocols is discussed firstly; the process of neighbor discovery protocol and its leaks will be addressed. And the principals, damage includes the classify method of IPv6 LAN attacks is given. Tow attacks which named Alive6 and DosNewIP will be talked in detail. Then the design and implementation of the Snort preprocessor that can detect the tow attacks will be expatiated. The flow chart of the program will be also given. After that, the role of the tow attacks and its consequences will be analyzed; the relationship between Alive6 (also DosNewIP) and other attacks is revealed and the Knowledge Base which denotes these relationships will be given. In the last, the tests verify the validity of this paper.