IPv6 Network Security using Snort
نویسنده
چکیده
IPv6 is new routing protocol. IPv6 is introduced by IETF mainly due IPv4 address exhaustion but it is also an enhanced version of IPv4. There are many changes in IPv6 header, some fields from IPv6 header has been deprecated from IPv6 and some are newly added. There is also common misconception among people that IPv6 is more secure than IPv4, which is not true. Now a day's intruders are targeting IPv6 networks as it is widely being accepted by many organization for their network. An intruder can do enough damage if it gets unauthorized access to the someone IPv6 network. So, There is need to do more research to secure IPv6 networks. Detecting an intruder in IPv6 network is hot topic among the researchers. Intrusion detection is a technique to detect the unauthorized access to the network. An intrusion-detection system (IDS) monitors system and network to detect intruders that are trying to gather information on network for which they are not authorized. IDS also alerts the administrator for misuse of network. All IDS support IPv4. But only few of them provide good support for IPv6. In this paper, Deployment of small IPv6 network and intrusion detection using Snort in the IPv6 network has been done. Mainly the focus is on intrusion detection in IPv6 network.
منابع مشابه
An Approach for Intrusion Detection of IPv6 Network Based on LS-SVM Algorithm
IPv6 has enough IP addresses to solve the problem of lack of IP address space. However, there are many security problems to be concerned. The detection ability of current intrusion detection system is poor when given less priori knowledge. In this paper, we analyze the Least Squares Support Vector Machine (LS-SVM) algorithm and the working process of snort intrusion detection system. And then w...
متن کاملDevelopment of a Snort IPv6 Plugin - Detection of Attacks on the Neighbor Discovery Protocol
This paper describes the implementation and use of a preprocessor module for the open source Intrusion Detection System Snort. Our implementation utilizes preprocessor APIs for the extension of Snort and provides several new IPv6-specific rule options that make the definition of IPv6-specific attack signatures possible. The preprocessor detects attacks against the IPv6 Neighbor Discovery Protoc...
متن کاملImprovement and parallelization of Snort network intrusion detection mechanism using graphics processing unit
Nowadays, Network Intrusion Detection Systems (NIDS) are widely used to provide full security on computer networks. IDS are categorized into two primary types, including signature-based systems and anomaly-based systems. The former is more commonly used than the latter due to its lower error rate. The core of a signature-based IDS is the pattern matching. This process is inherently a computatio...
متن کاملRule-Based Network Intrusion Detection System for Port Scanning with Efficient Port Scan Detection Rules Using Snort
In the field of network security, researchers have implemented different models to secure the network. Intrusion Detection System is also one of them and Snort is an open source tool for Intrusion Detection and Prevention System. Today intrusion Detection System is a growing technology in network security and mostly researchers have focused in this field, some of them used signature or rule-bas...
متن کاملImproved Intrusion Detection System through Rule Based Approach on ICMP Protocol for Real Time Network
Abstract—In the field of network security, researchers have implemented different models to secure the network. Intrusion Detection System is also one of them and Snort is an open source tool for Intrusion Detection and Prevention System. Today intrusion Detection System is a growing technology in network security and mostly researchers have focused in this field, some of them used signature or...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2013