CAJ | 학술논문

隧道技术是IPv4向IPv6过渡阶段的重要研究内容，为无IPv6物理接入的用户提供基于隧道的IPv6接入，使其可提前使用IPv6网络。为提高隧道网络的安全性，对隧道流量有关安全设备的影响进行了研究。指出隧道技术可被攻击者利用实施针对网络边界安全设备的数据逃逸，攻击网络内部主机。因此，提出了基于隧道分类的防御方法，通过在特定结构中增加外层包头的相关信息对不同流量进行分类，抵御上述攻击。实验表明，该方法具有较好的时间和空间复杂度，对系统负载影响较小。
수도기술시IPv4향IPv6과도계단적중요연구내용，위무IPv6물리접입적용호제공기우수도적IPv6접입，사기가제전사용IPv6망락。위제고수도망락적안전성，대수도류량유관안전설비적영향진행료연구。지출수도기술가피공격자이용실시침대망락변계안전설비적수거도일，공격망락내부주궤。인차，제출료기우수도분류적방어방법，통과재특정결구중증가외층포두적상관신식대불동류량진행분류，저어상술공격。실험표명，해방법구유교호적시간화공간복잡도，대계통부재영향교소。
Tunneling is one of the key researches in the transitioning from IPv 4 to IPv6 networks .It provides a feasible method for the end customers to connect to IPv 6 Internet even if they have no native IPv 6 connections .To improve the secur-ity of tunnels,this paper studies the influence of tunnel traffic on the security devices ,and points out that tunnels could be exploited by attackers to perform data evasion on the security devices and attack internal hosts .Therefore ,this paper propo-ses a defending strategy based on tunnel classification ( TCDS ) .By defining external headers in recording structures and comparing from the outermost to innermost headers , TCDS could effectively classify different traffics .Experimental results show,TCDS is with favorable time and space complexity which has little effect on the system load .