IPv6 address hopping active defense method based on a sliding time window

Abstract

The invention relates to an IPv6 address hopping active defense method based on a sliding time window. A communication process based on IPv6 address hopping is executed on the basis of the negotiationof parameters such as sliding window size, hopping interval and the like between an IPv6 communication initiator and an IPv6 communication receiver. A time window adaptive adjustment algorithm is introduced, so that communication between IPv6 nodes presents the characteristics of randomization and dynamics, and can adapt to more complex network environments. Specific to the problems of high synchronization delay, difficulty in event triggering and low communication efficiency in an IPv6 network node address hopping process, the IPv6 address hopping active defense method based on the sliding time window is proposed according to a mobile target defense technical thought, thereby ensuring the overall efficiency of communication between end nodes, increasing the cost of attacker detection, and improve the security of IPv6 internode communication.

Description

technical field [0001] The invention relates to an active defense method for IPv6 host communication, in particular to an active defense method combined with a sliding time window for jumping. Background technique [0002] The IPv6 network restores end-to-end communication, and each IPv6 node corresponds to a globally routable unicast address. Due to the sufficient address space, technologies such as Network Address Translation (NAT) are no longer needed. In this case, the attacker can more accurately detect and attack the target IPv6 node, so how to enhance the concealment of IPv6 communication and ensure the security of IPv6 nodes has received more and more attention. [0003] Moving Target Defense (MTD) is one of the "game-changing" revolutionary technologies proposed by the United States, which aims to increase the randomness, diversity, and dynamics of information systems, thereby increasing the difficulty and cost of attacks. Address hopping (Address Hopping, AH) ref...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problems of high delay, difficult triggering and low efficiency in the process of IPv6 network node address hopping, the present invention proposes an active defense method for IPv6 address hopping based on sliding time window (Address Hopping based on Sliding Time Window in IPv6, AHSTW), the communication parties use the shared key to negotiate address jump parameters, and introduce a time window mechanism. The communication parties only receive communication data packets within the time window, which not only ensures communication security, but also ensures communication efficiency.

Images