IPv4向IPv6過渡中安全問題的研究.pdf

1、中南民族大學(xué)碩士學(xué)位論文IPv4向IPv6過渡中安全問題的研究姓名：李京申請學(xué)位級別：碩士專業(yè)：計算機應(yīng)用技術(shù)指導(dǎo)教師：段汕20090520IPv4向IPv6過渡中安全問題的研究IIAbstractTodayssocietythewktechnologyadvanceswksplayanincreasingsocioeconomicrole.WiththerapidpopularizationofthewkIPv4cannotmeett

2、heneedsofthedevelopmentIPv6toreplaceIPv4hasbecomeaninevitabletrend.HoweverthecurrentIPv4wkhasalargenumberofapplicationsinthewldnowtheapplicationhasbeeninstalledwldwidewkequipmentIPv4wkthevastmajityofthesedevicesisahugere

3、novationprojectcanachievelongtermefftsoIPv6toreplaceIPv4onlyabletoachieveagradualprocessbutalsowillbealongprocess.IntheIPv4toIPv6transitionphaseIPv6IPv4willcoexistthecoexistenceofavarietyofwktechnologiesapplicationswilln

4、otbecompatiblewithavarietyoftechnicalsecurityissuesmanysuchasthetransitionoftechnologywksecuritytechnologyIPSecdoesnotmatchtheexisting.TheseissuesaretheurgentneedtofindasolutiontheprogramhasreachedIPv6toreplaceIPv4wksmoo

5、thly.InmypaperthetransitionofIPv4toIPv6duringthecurrenttransitionofthemajtechnologiesnextgenerationwktechnologyhasbecomeanintegralpartoftheIPSecwksecuritytechnologytoconductastudyofIPv6toreplaceIPv4wkthatmayexistduringth

6、ekindsofsecurityissuesspecificresearchanalysisinparticularthestudyfocusedonthetransitionthemaintechniquesusedinwksecuritytechnologyusedbytheexistenceoftheproblemdoesnotmatch.Inmypaperthetransitionofwktechnologyasanimptan

7、ttechnologyinthewkaddresstranslationprotocoltranslationtechnologywksecuritytechnologydoesnotmatchthetwotoimprovetheprogramputfward.InthepaperinaprogramknownasthepresentthesourceIPaddressofthesecuritybulletintoimprovethep

8、rogram.TheprogramtosolvetheproblemisthatwhentheIPSecdatagramwaytoaddresstranslationprotocoltranslationgatewaysgatewaywhenthedatawerereptedtomodifythesourceIPaddressthereceivingendcannotbeidentifiedthroughthesecurityissue

9、s.TosolvethisproblemthemainideaisthatwhenthesendingendreceivingendofasecureconnectionwasestablishedimmediatelyafterthereceivingendtosendasendclientIPaddresseswithNATNoticeofloadthereceivertoreceivethisnoticethroughtheloa

10、dtoobtaintheIPaddressofthesendingenditkeptinasecureconnectionoftheSADfreceivingthedatareptedtothesecurityofidentification.AnotherprograminthepaperreferredtoasESPsecuritymechanismsintheagreementtoimprovetheprogram.Theprog

11、ramtosolvetheproblemisthatwhenIPdataencryptionwithESPnewspaperreptedthatwayinthedataaddresstranslationprotocoltranslationgatewaysgatewaywhenthedatawerereptedtomodifythesourceIPaddresstheoccurrenceofTCPUDPdatagramtesteder

12、rproblems.TosolvethisproblemthemainideaistochangethescopeofESPencryptionsecuritysocketlayerusingSSLfdataencryptionatthedatareptedinthedatameanstoaddresstranslationprotocoltranslationgatewayatthegatewaytotheESPdecryptionr