| IPv6环境下ND协议的安全威胁及防御对策研究 |
| |
| 引用本文： | 王宇杰,杨志军.IPv6环境下ND协议的安全威胁及防御对策研究[J].铁路计算机应用,2010,19(5):5-8. |
| |
| 作者姓名： | 王宇杰 杨志军 |
| |
| 作者单位： | 北京交通大学,信息中心,北京,100044 |
| |
| 摘 要： | 通过对IPv6地址与ND协议报文结构和工作机制的分析,可以了解IPv6环境下工作于本地链路范围的ND协议面临的安全威胁.从ND协议使用的5种类型ICMPv6消息入手,剖析可能存在的RA、NA、重定向欺骗和RS、NS泛洪安全隐患,针对安全威胁提出在接入层交换机上实施的防御策略,起到保护本地链路范围内信息报文正常交互的目的.
|
| 关 键 词： | ND协议 ND欺骗 ND泛洪 安全防御 |
| 收稿时间： | 2010-05-15 |
Study on safety threat and defense countermeasure of ND protocol under IPv6 environments |
| |
| WANG Yu-jie,YANG Zhi-jun.Study on safety threat and defense countermeasure of ND protocol under IPv6 environments[J].Railway Computer Application,2010,19(5):5-8. |
| |
| Authors: | WANG Yu-jie YANG Zhi-jun |
| |
| Institution: | WANG Yu-jie,YANG Zhi-jun(Information Center,Beijing Jiaotong University,Beijing 100044,China) |
| |
| Abstract: | By means of analysis of IPv6 address and ND protocol packet framework and work mechanism,we could understand safety threat of ND protocol working in the link-local scope under IPv6 environments.Starting with five types ICMPv6 messages of ND protocol using,anatomizing potential safety hidden trouble concerning RA,NA,redirection cheat and RS,NS flooding,aiming at safety threat,it was put forward defense policy which were implemented in the access switches,achieving safeguard objective that the information pac... |
| |
| Keywords: | ND protocol ND cheat ND flooding safety defense |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《铁路计算机应用》浏览原始摘要信息 |
| 点击此处可从《铁路计算机应用》下载免费的PDF全文 |
|
