IPv6 network-orientated detection method for counterfeit source address messages

Abstract

The invention discloses an IPv6 network-orientated detection method for counterfeit source address messages. According to the method, a client constructs M counterfeit source address messages according to the instruction of a detection command, constructs a detection queue with M normal messages, and sends the detection queue to a server; the server analyses a one-time detection result according to the case of receiving the normal messages and the counterfeit source address messages, and calculates a preliminary filter effect for the counterfeit source address of a host according to the one-time detection result; the server calculates a final filter effect for the counterfeit source address of the host according to the N-time detection results of the single host; the source address filter effect of a subnet is calculated according to the multi-time detection results of a plurality of hosts in the single subnet. According to the method disclosed by the invention, the counterfeit IPv6 source address messages are constructed according to the instruction of the server, and the server analyses and detects whether the client implements fine-grained source address verification while being accessed to the subnet according to the receiving condition of the counterfeit source address messages.

Description

technical field [0001] The invention relates to the field of computer network management, in particular to an IPv6 network-oriented packet detection method for counterfeit source addresses. Background technique [0002] As the Internet Assigned Numbers Authority (IANA) announced in February 2011 that the last batch of IPv4 addresses had been assigned to the Regional Internet Registry, the Asia-Pacific Regional Center announced in April 2011 that it would no longer allocate IPv4 addresses. IPv4 network addresses has been basically exhausted. The Internet will gradually transition to the IPv6 era, and new network construction will fully use IPv6 addresses. In China, driven by China Next Generation Internet (CNGI), IPv6 networks have been widely used. [0003] However, due to the Internet's architecture of message forwarding according to the destination address, the source address of the data message arriving on the Internet will not be checked, which leads to the existence o...

AI Technical Summary

Problems solved by technology

[0003] However, due to the Internet's architecture of message forwarding according to the destination address, the source address of the data message arriving on the Internet will not be checked, which leads to the existence of counterfeit source address attacks, and leads to distributed denial of service attacks, Man-in-the-middle attacks and other issues that seriously endanger Internet security

Images