Researches on the IPv6 Network safeguard linked system
Ma Yue, Lian Hong, Xiao Feng Zhang · 2010
In security protection, the hotspot of research is the linkage of intrusion detection to firewall and honeypot. At present the linkage System achieved is still limited to IPv4 Network. Based on the analyses of the structure of IPv6 NIDS, this paper aims at improving the real-time alert and accuracy of intrusion detection by means of AC-BM Fast Multivariate Matching Algorithm. The introduction of collaboration and information sharing between the virtual honeypot technology and NIDS can be used to avert or buffer the illegal actions of Intruders. By careful study of unknown means of attacks, relevant rules can be extracted by updating intrusion feature Database, thereby promoting it operative efficiency. Test results have proved that it is effective and reliable to establish the linkage system of intrusion detection with virtual honey pot based on IPv6 Network.