Design and Implementation of Distributed Firewall System for IPv6

摘要：

The deployment of the IPv6 network becomes to be realized as the necessity of the IPv6 network is enlarged due to the limit of the IPv4 network. However, the security policy about the IPv6 network is not mature and it becomes an obstacle in the IPv6 network deployment Attackers can detour the access control of packet filtering system, unless packet filtering system can decrypt IPSec packet. This paper introduces the implementation of Distributed Firewall System (DFS) that can be applicable to the IPv6 network and has capabilities of processing encrypted IPSec packet. The prototype introduced in this paper has been implemented in order to be applied to the IPv6 network preferentially. Although it has a limit to forward performance, the prototype can give the basic concepts toward the IPv6-based DFS equipment.

关键词： IPv6 firewall IPSec attack

作者: Yingxu Lai Guangzhi Jiang Jian Li Zhen Yang

作者单位: Department of Information Security Institute of Computer Science,Beijing University of Technology Be Department of Information Security Institute of Computer Science, Beijing University of Technology B

会议类型: 国际会议

会议名称: The International Conference on Communication Software and Networks(2009 IEEE通信软件与网络国际会议 ICCSN 2009)

会议地点: 成都

会议语种:英文

页码: 428-432

在线出版日期: 2009-02-20（万方平台首次上网日期，不代表论文的发表时间）