IPv6网络邻居发现攻击的技术特点及防范措施

Technical features and preventive measures of IPv6 network neighbor discovery attacks

在线阅读下载PDF

导出

摘要 [目的/意义]网络邻居发现是IPv6中一个重要的协议,作用是自动发现网络中的主机和设备,并建立通信关系.但是,由于IPv6网络邻居发现协议中存在漏洞和缺陷,攻击者可以利用这些漏洞进行攻击,对网络设备安全造成威胁.因此,网络管理人员需要了解IPv6网络邻居发现协议的基本原理、IPv6网络邻居发现攻击的主要特点和常见工具,采取多种技术防范措施,加强对IPv6网络邻居发现协议的安全控制和监测,以保护网络空间安全.[方法/过程]搜集相关文献,并进行分类整理,在此基础上通过实验模拟IPv6网络邻居发现攻击,并记录攻击的过程和效果,进而提出一系列防范措施.[结果/结论]IPv6网络邻居发现攻击的技术特点和危害比较明显.在实际应用中,为了保障IPv6网络的安全,必须采取合适的防范措施.为此,提出的防范措施可以有效地预防IPv6网络邻居发现攻击,有助于提升IPv6网络的安全性. [Purpose/Significance]Network neighbor discovery is an important protocol in IPv6.It automatically discovers hosts and devices on the network and establishes communication relationships.However,there are vulnerabilities and defects in the IPv6 neighbor protocol,which can be exploited to threaten the security of network devices.Therefore,network administrators need to understand the basic principles of IPv6 neighbor discovery,the main features and common tools of IPv6 neighbor discovery attacks,and take various technical preventive measures to strengthen security control and monitoring of IPv6 neighbor discovery to protect the security of the network space.[Method/Process]Collect a large number of related literature,classify them,on this basis,through the experiment to simulate IPV6 network neighbor to discover the attack,and record the effect and process of the attack,and then put forward a series of preventive measures.[Results/Conclusion]The technical features and hazards of IPV6 network neighbor discovery attacks are obvious.In practical applications,appropriate preventive measures must be taken to ensure IPV6 network security.The preventive measures proposed in this paper can effectively prevent IPV6 network neighbor discovery attacks and improve IPV6 network security.

作者俞杨建 Yu Yangjian(Taizhou University,Jiangsu Taizhou 225300)

机构地区泰州学院

出处《网络空间安全》 2023年第4期81-85,共5页 Cyberspace Security

基金江苏高校哲学社会科学研究一般项目“疫情防控背景下提高学生线上学习参与度与实效性的路径研究”(项目编号:2022SJYB2332)。

关键词 IPV6 网络邻居发现攻击防范网络治理网络安全 IPv6 network neighbor discovery to attack guard against network governance network security

分类号 TP309 [自动化与计算机技术—计算机系统结构]

作者简介俞杨建(1978-),男,汉族,江苏泰州人,南京师范大学,硕士,泰州学院信息化中心,副研究员,主要研究方向和关注领域:教育管理、网络治理与网络安全。