收稿日期: 2004-02-16
修回日期: 2004-04-05
网络出版日期: 2005-01-15
基金资助
国家高技术研究发展计划(863)项目(2001AA121015);中国科学院知识创新工程项目(KGCX2SW102)资助
Research on IPv6 Security
Received date: 2004-02-16
Revised date: 2004-04-05
Online published: 2005-01-15
张玉军 , 田野 . IPv6协议安全问题研究[J]. 中国科学院大学学报, 2005 , 22(1) : 30 -37 . DOI: 10.7523/j.issn.2095-6134.2005.1.005
This paper analyzes the internal and external security features of IPv6, based on which the IPv6 security vulnerabilities are pointed out. The security attacks aiming at internal data structure and aiming at mobility, and the challenge to the current network security architecture, are discussed. For these security problems, their originations and features are described in detail. Then, this paper proposes technical solut ions to solve these problems separately
[1] Mark A, Miller PE. Implementing IPv6, Second Edition: Supporting the Next Generation Protocols. M&T Books, 1999
[2] Wang L, Qian HL. IPv6 security and its impact to today. s network security archit ecture. Microelectronics & Computer , 2003, 20(1) : 50—53(InChinese with English abstract )
[3] Ellermann U. IPv6 and Firewalls. SECURICOM- 14th International Congress on Computer and Communicat ions Security Prot ection, 1996
[4] Deering S, Hinden R. Int ernet protocol, Version 6 (IPv6) Specificat ion, RFC 2460, 1998
[5] Dobrucki M. The effects of the transit ion to IPv6 on Internet security. Nixu Ltd. 1999
[6] McCann J, Deering S, Mogul J. Path MTU discovery for IP version 6, RFC 1981, 1996
[7] Kent S , Atkinson R. Security archit ecture for the Internet protocol, RFC 2401, 1998
[8] Doraswamy N, Harkins D. IPSec- the new security standard for the Int ernet, Intranet, and Virtual Private Networks. Publ ished by Prentice HallPTR, 1999
[9] Nart en T, Nordmark E, Simpson W. Neighbor discovery for IP Version 6 (IPv6) , RFC 2461, 1998
[10] Johnson D, Perkins C, Arkko J. Mobilit y support in IPv6, RFC 3775, 2004
[11] Robez NG. VPN and Firewal l Traversal. Seminar on Network Securit y Tik-110. 501 2000. 2000
附中文参考文献
[2] 王 玲, 钱华林. IPv6 的安全机制及其对现有网络安全体系的影响. 微电子学与计算机, 2003, 20(1) : 50—53
/
| 〈 |
|
〉 |
