Article,
Design and Implementation of an IPv6 Plugin for the Snort Intrusion Detection System
6 (2): 409-452 (2013)
Abstract
This work describes the implementation and use of a preprocessor module for the popular open source Intrusion Detection System Snort that detects attacks against the IPv6 Neighbor Discovery Protocol. The implementation utilizes the existing preprocessor APIs for the extension of Snort and provides several new IPv6-specific rule options that can be used to define IPv6 related attack signatures. The developed module is aimed at the detection of suspicious activity in local IPv6 networks and can detect misconfigured network elements, as well as malicious activities from attackers on the network. The pluginś source code is available at https://github.com/mschuett/spp_ipv6
Tags
- ds15
- ids
- intrusion_detection
- ipv6
- misev,security,sicherheit,hacking,security
- mjsarticle
- research
- selfarticle
- snort
