Dynamic immune intrusion detection system for IPv6

Abstract

LiYao Li Zhi-tang TuHaoyaolee@hust.edu.cn leeying@hust.edu.cn tuhao@hust.edu.cnHuazhong University of Science andTechnology Computer SchoolHubei, Wuhan, P.R.China, 430074 Abstract: We have set up a project aimed at developing a dynamical immune intrusion detec-tion systemfor IPv6 and protecting the next generation Internet fromintrusion. We focus on in-vestigating immunelogical principles in designing a dynamic mu lti-agent systemfor intrusion de-tection in IPv6 environment, instead of attempting to describe all that is intrusion in the networktry and describe what is normal use and define non-self Ž as intrusion . The proposed intrusiondetection systemis designed as flexible, extendible, and adaptable in order to meet the needs andpreferences of network administrators for IPv6 environment.Key Words: Immune, IPv6, Intrusion detection1. IntroductionIPv6 contains numerous features that make it more security via IPSec, It is more reliable andmore easy to set up, with autoconfiguration compared with IPv4. However , IPv6 is not absolutesecurity because there are few security problems derive solely fromthe IPlayer in the networkmodel and IPv6 brings new security issues that did not exist with single IPv4. It also includesmany enhancements, some of which can be exploited by attackers. For example, the addressauto-configuration feature be used by attackers to announce rogue routers. In add ition, some of thetransition mechanisms designed to allow for easier interaction between IPv6 and IPv4 networkscan be misused by attackers. Transitioning tools create a way for IPv4 applications to connect toIPv6 services, and IPv6 apps to connect to v4 services. Packets filtering , core function for accesscontrol, is more difficult with IPv6. New denial of service attacks with IPv6 become more effec-tively. IPv6 includes the capability for end-to-end encryption and IPSec, ensuring both confidenti-ality and integrity of data passed between two hosts .However, IPsec is not the answer to everyIPv6 security issues, and a new protocol brings new security issues with it.Recently ,research on building security systems to protect IPv6 network has become increas-ingly important with the spread of the next generation internet .Attacks ,or intrusions ,against theIPv6 network will become comm onplace events .Many manufacturers are developing their intru-sion detection systems on IPv6 .But few of these intrusion detection systems is perfect ,they arejust available to decode the IPv6 packets or help counter the threat of the attacks ,and attackers arecontinually trying to evade detection.