IPv6 network false source address data packet tracking method and device

Abstract

The invention relates to an IPv6 network false source address data packet tracking device for searching real source of data packet and tracking attack on IPv6 system. The devices expands a conventional router transferring sub-system, and adds an address information searching module, a host address information data base, a transferring packet abstract data base, a data packet transferring judging module, a false data packet processing module and a false source address IP data packet inquiring module. The invention further provides a method for using the device to track false source address IP data packet. The method comprises: when an access network router detects a suspicious false source address IP data packet, an access network router collect features of the data packet, combines rear 64 bits coded as source address with pre-saved 64 bits of a special IPv6 address to form a new trackable IPv6 address to substitute the original IPv6 system in order to conduct normal data transferring. And at the same time, the router records information about real relation and transferring time of the data packet feature and the real data source for the tracking of the data packet.

Description

technical field [0001] The invention belongs to the technical field of IP data network, and relates to a method and a device for tracing IP data packets with false source addresses on the IPv6 network. Background technique [0002] With the continuous development of science and technology, the Internet has been more and more widely used in people's work and life. However, the IPv4 address is only 32 bits, which cannot meet the huge demand of the society for Internet applications, so the IPv4 network will gradually be replaced by the IPv6 network. The IPv6 network adopts a 128-bit long network address, which provides resource guarantee for the sustainable development of the Internet. The huge IPv6 address space can effectively prevent hackers from brute-force scanning attacks, and worms that rely solely on address scanning for propagation will not be able to spread effectively; IPv6 cancels broadcast addresses, and DDos (Distributed Denial of Service) attacks based on local ...

AI Technical Summary

Problems solved by technology

[0009] Due to the current IP data packet traceability method, a large amount of network bandwidth needs to be occupied to carry the IP data packet forwarding path information, and all routers through which the data packet passes must cooperate to complete the reconstruction of the data packet forwarding path, and the backbone network router also needs to have a huge storage space. Record the historical data of forwarded IP data packets, these limitations make the existing IP data packet traceability system difficult to deploy

In addition, the existing technical solutions are all proposed for IPv4 networks, and there is no effective traceability scheme for false source address IP data packets for the upcoming large-scale deployment of IPv6 networks.

Images