Design and Implementation of an IPv6 Plugin for the Snort Intrusion Detection System

Download Now
Provided by: University of Madras
Topic: Security
Format: PDF
In this paper, the authors describe the implementation and use of a preprocessor module for the popular open source Intrusion Detection System Snort that detects attacks against the IPv6 Neighbor Discovery Protocol. The implementation utilizes the existing preprocessor APIs for the extension of Snort and provides several new IPv6-specific rule options that can be used to define IPv6 related attack signatures. The developed module is aimed at the detection of suspicious activity in local IPv6 networks and can detect misconfigured network elements, as well as malicious activities from attackers on the network.
Download Now

Find By Topic