Design and Implementation of Distributed Intelligent Firewall Based on IPv6

LIU Zeng-hui; LAI Ying-xu; YANG Zhen; MA Qian

Journal of Beijing University of Technology > 2011 > 37(12): 1896-1902.

LIU Zeng-hui, LAI Ying-xu, YANG Zhen, MA Qian. Design and Implementation of Distributed Intelligent Firewall Based on IPv6[J]. Journal of Beijing University of Technology, 2011, 37(12): 1896-1902.

Citation:

LIU Zeng-hui, LAI Ying-xu, YANG Zhen, MA Qian. Design and Implementation of Distributed Intelligent Firewall Based on IPv6[J]. Journal of Beijing University of Technology, 2011, 37(12): 1896-1902.

Citation:

LIU Zeng-hui, LAI Ying-xu, YANG Zhen, MA Qian. Design and Implementation of Distributed Intelligent Firewall Based on IPv6[J]. Journal of Beijing University of Technology, 2011, 37(12): 1896-1902.

PDF (513 KB)

Design and Implementation of Distributed Intelligent Firewall Based on IPv6

1. Technology Department of Engineering, Beijing Vocational College of Electronic Science and Technology, Beijing 100029, China;
2. College of Computer Science, Beijing University of Technology, Beijing 100124, China

More Information

Received Date: October 09, 2009
Available Online: December 02, 2022

Graphical Abstract

Abstract

Abstract

IPv6,as the alternative of IPv4,contains numerous features and improvements that make it attractive from a security perspective,but it is by no means the panacea for security.This paper presents the design and implementation of a distributed intelligent firewall system based on IPv6,which is able to secure the network layer and application layer of IPv6 networking.By the system,the typical attacks coexisting in both IPv4 and IPv6,the emerging IPv6 specific ones such as security threats related to ICMPv6,can be blocked by the rule set of network layer.Similarly,with the rule set of application layer,any illegal or reactionary Web page content in HTML source codes can be totally prevented from sneaking into the Intranet.The initiative drift mechanism ensures the legitimacy and civilization of the Web environment within the whole IPv6 networking.
- Internet Protocol version 6(IPv6),
- firewall,
- network security

FullText(HTML)

References (9)

References

[1]	CYNTHIA M,JEFFREY D.Internet Protocol version 6(IPv6)protocol security assessment[C]∥Proceedings of 2007Military Communications Conference.Orlando:Institute of Electrical and Electronics Engineers,2007,29:1-7.
[2]	HONGSEOK J,JUNGHOON J.IPv6 neighbor discovery protocol for common prefix allocation in IEEE 802.16[C]∥Proceedings of the 8th International Conference on Advanced Communication Technology.Phoenix Park:Institute of Electricaland Electronics Engineers,2006(3):1661-1663.
[3]	SABIR M R,FAHIEM M A,MIAN M S.An overview of IPv4 to IPv6 transition and security issues[C]∥Proceedings of 2009WRI International Conference on Communications and Mobile Computing.Kunming:Institute of Electrical and ElectronicsEngineers,2009(3):636-639.
[4]	JUNG B H,LIM J D,KIM Y H,et al.An analysis of security threats and network attacks in IPv6[J].Electronics andTelecommunications Trends,2007,22(1):37-50.
[5]	ZAGAR D,GRGIC K,RIMAC-DRLJE S.Security aspects in IPv6 networks[J].Computers and Electrical Engineering,2007(33):425-437.
[6]	CAICEDO C E,JOSHI J B D,TULADHAR S R.IPv6 security challenges[J].Computer,2009,42(2):36-42.
[7]	张玉健,张月琳.基于PKI的IPv6安全邻居发现协议[J].计算机工程,2008,34(8):187-189.ZHANG Yu-jian,ZHANG Yue-lin.IPv6 neighbor discovery protocol based on PKI[J].Computer Engineering,2008,34(8):187-189.(in Chinese)
[8]	周增国,李忠明.Linux平台下Netfilter/IPtables包过滤防火墙的研究与应用[J].网络安全技术与应用,2008(1):49-50.ZHOU Zeng-guo,LI Zhong-ming.Study and application of Netfilter/IPtables packet filter firework based on Linux[J].Network Security Technique and Application,2008(1):49-50.(in Chinese)
[9]	JONES A.Netfilter and IPtables:astructural examination[EB/OL].[2004-02-26].http:∥www.sans.org/reading room/whitepapers/firewalls/netfilter-iptables-structural-examination-1392.

Cited By

Get Citation

PDF

XML

Article views (8) PDF downloads (7)

Turn off MathJax

Article Contents

Abstract

References

Design and Implementation of Distributed Intelligent Firewall Based on IPv6

Abstract

References

Catalog

Export File

Citation

Format

Content