本文已被：浏览 1421次 下载 3172次
Received:December 23, 2011 Revised:February 06, 2012
Received:December 23, 2011 Revised:February 06, 2012
中文摘要: Snort是一个功能强大的轻量级NIDS, 它能够检测出各种不同的攻击方式, 并能对攻击进行实时告警. 针对Snort没有提供对IPv6地址前缀攻击检测支持的问题, 提出利用预处理插件检测该类攻击的解决方案, 给出了插件的检测流程. 实验结果表明, 该插件对地址前缀欺骗攻击具有较高的检测率, 是一种有效的入侵检测系统插件.
Abstract:Snort is one of a light wight, powerful NIDS. It can detect many different kinds of attack behaviors, and give real-time alerts. Because Snort does not support the detection of IPv6 address prefix spoofing, this paper supplies a solution to implement the intrusion detection preprocessor plug-in and provides the detection process. The experimental result proves that the preprocessor has a higher detection ratio to the spoof of IPv6 address prefix, and it is an effective plug-in on the intrusion detection system.
文章编号： 中图分类号： 文献标志码：
基金项目:
引用文本：
张宏,龙春,葛敬国,李俊.预处理插件在IPv6入侵检测系统中的应用.计算机系统应用,2012,21(9):32-37
ZHANG Hong,LONG Chun,GE Jin-Guo,LI Jun.Application of Preprocessor Plug-in to IPv6 Intrusion Detection System.COMPUTER SYSTEMS APPLICATIONS,2012,21(9):32-37
张宏,龙春,葛敬国,李俊.预处理插件在IPv6入侵检测系统中的应用.计算机系统应用,2012,21(9):32-37
ZHANG Hong,LONG Chun,GE Jin-Guo,LI Jun.Application of Preprocessor Plug-in to IPv6 Intrusion Detection System.COMPUTER SYSTEMS APPLICATIONS,2012,21(9):32-37
