新时期下防护网络攻击技术展望.PDFVIP

Denial of ServiceSYN IPv6 IPv6 IPSec IPSec IPSec IPSec IPv4 IPv6 IPSec IP IPSec (AH)(ESP) IPSec Abstract : At the begin of the dissertation, we has discussed the state of network security, then analyzed the hackers’ ultimate weapon , Denial of Service, of whose characteristics the most difficult to prevent is short-lived SYN connections, aiming to exhaust network resources and cause the target servers to be unable to provide proper services to the legitimate users. According these threat factors and attacking methods, we also summed up the safety precautions and technology methods. The paper focuses Ipv6 security protocol, and IPSec abilility, the security architecture, IPSec working mechanisms and the method to implement IPSec are analyzed in detail. We dissertate the ability of IPSec, IP packet’s integrity, secrecy, authority, data origination and so on. And disscussed IPSec protocol, Authentication Header(AH) and Encapsulating Security Payload(ESP), in addition other component of IPSec security architecture, such as security strategy, encryption, authentication, key management and so on are not involved in this paper for theit complexity and security. If you are and demand, you can contact with authors. IPv6 IPSec 1 DOS Denial of service Dos internet Dos Dos 1 IP ,IP Keyed MD5 ,MD5 REC1321 TCP/IP IPv6IPSec AH(ESP) IPv6 2IPv6 IPv4 --IPv6 IPv6 IPv6 IPv4 IETF --ngtrans IPv4 IPv6 IPv6 --6bone 1996 6bone 50 IPv6 CERNET 1998 6 6bone11 21 IPv6 IPv6 IPv6 AHIPv6 ESPIPSec IPv6 3 IPSec 31 IPSec IPSec TCP/IP IP IPv4 IPv6, IPSec IP IP IP 2 IPSec IP IP IPSec IPSec IPv6 IPv6 IPSecIPv4 IPSec IPSecIPv4 IPv6 IPSecIPv4 IPv6 IPSec : 1AH (Authentication Header)151 2ESP (Encapsulating Security Payload) 3IKE (Internet Key Exchange) IP AH ESP AH ESP IP