IPv6安全機(jī)制分析與實(shí)現(xiàn)

頁數(shù) 5 字?jǐn)?shù) 5492

摘要：網(wǎng)絡(luò)安全已經(jīng)成為全球的焦點(diǎn)，本文將針對(duì)IPv6安全機(jī)制進(jìn)行分析，介紹了IPv6中用以實(shí)現(xiàn)IPSec安全服務(wù)功能的認(rèn)證報(bào)頭AH和封裝安全載荷ESP兩個(gè)協(xié)議的工作模式，并重點(diǎn)討論了IPSec的實(shí)施。最后本文還簡(jiǎn)要分析了IPv6安全機(jī)制的局限性和對(duì)現(xiàn)行網(wǎng)絡(luò)安全體系的挑戰(zhàn)。

關(guān)鍵字：網(wǎng)絡(luò)安全,IPv6,IP層安全協(xié)議,認(rèn)證協(xié)議頭,安全加載封裝

Abstract: IPv6 (Internet Protocol version 6) is the successor to IPv4, which is the Current IP protocol version used on the Internet. IPv6 not only eliminate the address exhaustion problem, but also improve IP layer security because it supports two security mechanisms. Authentication Header (AH) and Encapsulating Security Payload (ESP). This article describes the theory of IP Security at length, and analyses the key technology of IPSec protocol. But the security mechanisms of IPv6 also make great impact to today’s network security architecture.
Key words: Network Security, IPv6, IPSec, AH, ESP
參考文獻(xiàn)：
[1]（美）Christian Huitema著，陶文星，胡文才譯，新因特網(wǎng)協(xié)議IPv6（第二版），清華大學(xué)出版社，1999，4：98～116。
[2]（美）Pete Ldshin著，IPv6祥解，北京：機(jī)械工業(yè)出版社，2000，4：69～79。
[3]（美）John e Canavan，F(xiàn)undamentals of Network Security，Boston：Artech House，2001：21～72。
[4]（美）S Kent，R Atkinson，IP Encapsulating Security Payload（ESP）[EB/OL]。
[5]（美）S Kent，R Atkinson，IP Authentication Header（AH）[EB/OL].