面向IPv6网络的入侵检测系统的设计与实现

摘要

为解决IPv6网络中网络入侵的安全问题,以Snort入侵检测系统为基础,引入了新应用程序接口(NAPI)技术与内存映射技术,同时提出了以用户行为模式为核心的主动防御策略.试验结果表明,该入侵检测系统能有效地提高数据包捕获效率,全面增强IPv6网络检测未知病毒的能力,是一种新型、高效、安全的IPv6网络入侵检测系统.%In order to protect IPv6 network from being intruded, based on Snort intrusion detection system, the technologies of new application programming interface( NAPI) and memory mapping are introduced. In addition, the active defense strategy with users' behavior pattern as the kernel is proposed. The experimental results indicate that this highly effective and safety intrusion detection system effectively enhances the efficiency of data packet capture and comprehensively intensifies the capability of IPv6 network to detect unknown viruses.