| IPv6 is also called the Next Generation Internet Protocol, IPng for short. It's one of the most import upgrade for the network technology. It will slowly develop into the fundamental infrastructure like IPv4 network today, and make great contribution to Internet. It will extend the usable address space, supply the new feature of plug and play for network management, simplify packet header, add IPsec which supply authentication and encryption, and provide better support for mobile IP function.IPv6 protocol gives more support for security, using EPsec for authentication and encryption. The new features it supply, including neighour discovery and stateless configuration, better support for mobile IP, multicast and anycast address format, and transition mechanisms have introduced new threat into network. Meanwhile, security technology and threat have changed in many ways, which means it's getting more and more important to study the security under IPv6 envirement.This paper gives a thorough analysis on IPv6 security, It focuses on security problems of IPv6 transition mechanisms, present active probing based tunnel discovery method. It also anlysize the security vuneribilities of neighbour discovery protocol, give some ideas on how to attack neighbour discovery protocol, implementing attacking tools AMS(Advertisement Message Sender),and test the attacking methods in lab. Finally, author give a overview on the future of IPv6 security research. |
