Research On Transition Scheme Of IPv6 And Cooperative Intrusion Detection

IPv6, as the next version of Internet Protocol, is inevitable to replace IPv4. But the transition from IPv4 to IPv6 can not be accomplished overnight. In a very long time, both of them will coexist. It is necessary to consider how to gradually upgrade from IPv4 to IPv6. IPv6 is not a simple upgrading IPv4. Their compatible can not be realized completely because of the differences in head features with address allocation mechanism. With the use and population of IPv6, there would be new and unforeseen security problems. IDT (Intrusion Detection technology) is a dynamic and active defensive means. How to help intrusion detection system in a new generation of IPv6 network play its due role in the protection, has become the focus of attention of the people.In this paper, the IPv6 protocol is analyzed with emphasis on two key technologies - IPv6 transition technology and IPv6 IDT. On this basis, a gradual smooth transition to IPv6 is designed; Cooperative Intrusion Detection System thinking is given, and combines with this kind of thinking, the overall framework of cooperative Intrusion Detection is designed based on the traditional ID and firewall. At the same time, a cooperative ID system is designed and realized, using two open source programs: Snort and iptables.College IPv6 solutions proposed in this paper have many advantages, such as, better practices, low requirement for hardware equipment. Tremendous capital investment can be avoided for colleges and universities. The connection of IPv6 networks and inter-operation of IPv4 with IPv6 can completed easily. According collaborative thinking, a Collaborative Intrusion Detection System is set up to support both IPv4 and IPv6 protocol. It can facilitate the deployment and implementation of low-cost inputs and enhance the security of the network.The author believes that IPv4 will eventually be replaced by IPv6, and this process is a long one. At the same time the process of transition will meet a lot of unpredictable security issues. IDT is the only one of the network security technology, the cooperation with other security technologies are needed to deal with various security issues. This will be the next step on the direction of this paper.