Research On Implementation Technology Of IPv6 Intrusion Detection System

With the development of network technology, the security problems of the network have become more and more important. Although we have a lot of security systems, such as network firewall and virus detecting system. There are still a lot of network attacks which can't be detected in time. Because these security systems are passive defense systems, the intrusion detection system comes out as an active defense system.With the development of IPv6 technology and the deployment of IPv6 networks, the cases that using new attack methods and network intrusion are more and more. The IPv6 Intrusion Detection System should be researched and developed for providing the security to the next generation network.The analysis of IPv6 vulnerability is the basic of IPv6 IDS. IPv6 penetration testing is essential for the design and development of IPv6 intrusion detection system. The purpose of IPv6 penetration testing is to find more security threats and to apply these security threats to the rules library of IPv6 IDS. So, the ability of IPv6 Intrusion Detection System will be more powerful.In this paper, we firstly analyze the vulnerabilities of IPv6 protocol stacks deeply. We divide the vulnerabilities of IPv6 into five areas according the vulnerability classification model.And then, we have presented the method that applies the Penetration testing to the research of IPv6 vulnerability. We have designed the vulnerability model of IPv6 penetration testing and the general model of Penetration testing tools, which can improve the detection results of IPv6 IDS.Based on the research of the Snort system, we have presented architecture and designed various functional modules of IPv6 IDS. Finally, we discuss the implementation technology of IPv6 IDS and test the function and performance of IPv6 IDS.