论文标题
更安全的IPv6社区过程
A more secure IPv6 neighborhood process
论文作者
论文摘要
IPv6网络中的邻里建立过程是通过NDP（邻居发现协议）制定的。使用包含要解决的IP地址的ICMPV6消息（NS-邻居招标和NA-邻居广告），可以在消息交换过程中暴露，从而使通信易受各种类型的攻击。本文提出了使用DH和HMAC算法的更安全的邻里建立的建议。实验是在虚拟化环境中进行的，目的是分析NDP中提出的修饰的效率。
The process of neighborhood establishment in an IPv6 network is made out through the NDP (Neighbor Discovery Protocol). Using ICMPv6 messages (NS - Neighbor Solicitation and NA - Neighbor Advertisement) which contains the IP address to be resolved, is exposed during the exchange of messages, making communication vulnerable to various types of attacks. This paper presents a proposal for a safer neighborhood establishment using the DH and HMAC algorithms. Experiments were performed in virtualized environments with the objective of analyzing the efficiency of the modification proposed in the NDP.
