Intrusion Prevention Technology. Ipv6 Environment

With the arrival of information times and rapid development of the Internet, the problem of network and information security is outstanding increasingly. IPv6 protocal, as the key point of next generation Internet, has been made lots of improvements based on IPv4, such as security, the auto-configuration of addresses, the mobility of IPv6 and better performance, and effectively resolve the problem of short of network addresses. Meanwhile, the research of network attack and security under IPv6 enviroment is still rare. To this practical problem, we undertook the national research program"IPv6 Intrusion Detect and Prevention System", and make some deep investigations on key techniques of IPv6 IPS(Intrusion Prevension System).Intrusion prevension technology, the one of kernel technology in this project is a new information security technology which could supply a firewall and the intrusion detect system in the information security domain. Not only does it detect intrusion events, but also hold back the intrusion happening and its development. With the transition process of IPv4 to IPv6, there will be new characteristics in network intrusion events, inevitably the original IPv4 Intrusion prevension technology will be changed to some extent.This thesis first describe the new features of IPv6, and its improvements compared with IPv4, then the possible new security issues under IPv6 new inviroment, and the changes of original security tools under IPv6 are analyzed. Next, based on the traditional Intrusion Detect System and Firewall, IPv6 Intrusion Prevension System is designed and implemented. According to the division of system functions, key techniques moduls of the whole system are detailed respectively in the next part. At last, the deployment of this IPv6 IPS and its testing results are given.At the end of this paper, a summary of this thesis is given, a brief prospect for the future extended development on basis of existing system has been figured out.