SAVI DHCPv6数据报文源地址验证方法研究
发布时间：2018-11-14 19:50
【摘要】：由于现今的网络缺乏源地址验证机制,导致多种依靠IP欺骗的恶意攻击时有发生。在DHCPv6场景中防止IP欺骗的源地址验证改进(SAVI)工作,目前正由互联网工程任务组(IETF)驱动,但尚未给出确切的源地址验证方法。为此,提出两个验证方法:改进的多比特Trie树算法和改进的哈希查找算法,实现了SAVI DHCPv6的仿真系统,并使用该系统进行不同验证方法的对比实验。结果表明,提出的两种改进方法比顺序查找方法具有更优的时间性能。
[Abstract]:Due to the lack of source address authentication mechanism, many malicious attacks that rely on IP spoofing occur frequently. In the DHCPv6 scenario, the source address verification to prevent IP spoofing improves the (SAVI) work. At present, it is driven by the Internet Engineering Task Force (IETF), but the exact method of source address verification has not been given yet. For this reason, two verification methods are proposed: the improved multi-bit Trie tree algorithm and the improved hash lookup algorithm. The simulation system of SAVI DHCPv6 is implemented, and the comparison experiments of different verification methods are carried out with the system. The results show that the two improved methods have better time performance than the sequential lookup method.
【作者单位】： 中国科学院大学;中国科学院计算机网络信息中心;北龙中网(北京)科技有限责任公司;
【基金】：国家自然科学基金面上项目(61375039) 中科院网络中心一三五重点项目(CNIC_PY_1402)
【分类号】：TP393.08
，
本文编号：2332129
[Abstract]:Due to the lack of source address authentication mechanism, many malicious attacks that rely on IP spoofing occur frequently. In the DHCPv6 scenario, the source address verification to prevent IP spoofing improves the (SAVI) work. At present, it is driven by the Internet Engineering Task Force (IETF), but the exact method of source address verification has not been given yet. For this reason, two verification methods are proposed: the improved multi-bit Trie tree algorithm and the improved hash lookup algorithm. The simulation system of SAVI DHCPv6 is implemented, and the comparison experiments of different verification methods are carried out with the system. The results show that the two improved methods have better time performance than the sequential lookup method.
【作者单位】： 中国科学院大学;中国科学院计算机网络信息中心;北龙中网(北京)科技有限责任公司;
【基金】：国家自然科学基金面上项目(61375039) 中科院网络中心一三五重点项目(CNIC_PY_1402)
【分类号】：TP393.08
，
本文编号：2332129
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2332129.html
