Research And Implementation Of IPv4 / IPv6 Network Attack Traceability System

Recently, the global IPv4network address resources have been exhausted, and the deployment of IPv6network should take quite a long time and cost a lot of equipment. Therefore, in the present and the future for a long period of time, we will be in the coexistence of IPv4and IPv6network status. Meanwhile, the network traceback technology has drawn more and more research institutions’s attention.In this paper we aim to propose and design a traceback system which focus on oriented attacker in the network status of the coexistence of IPv4and IPv6network environment.Our traceback system applies the method of analysis of packet data in network layer,which mainly analyses and records the packet data that flow through the equipment. In dealing with the network layer for the five sets of data, depending on the difference of IPv4and IPv6packets,we take advantage of data structure named a double-type BloomFilter. Double type Bloom Filter(DTBF) is an improvment of the standard BloomFilter, which based on the method of double independent address storage space aimed to reduce the the false positive rate.The simulation tests carried in the end verified that this method can guarantee a certain time and space consumption significantly as well as improve the accuracy of traceability.