【作者】 李杰； 吴建平； 徐恪；

【Author】 Li Jie,Wu Jianping,Xv Ke (Department of Computer Science and Technology,Tsinghua University,Beijing 100084,China)

【机构】 清华大学计算机科学与技术系；

【摘要】 随着网络规模的不断扩大和应用方式的日趋复杂,互联网正面临着漏洞多、可信度低等多样化的安全威胁,从可信任的角度出发,确保源IP地址的真实性是实现可信任下一代互联网的重要基础和前提。本文从体系结构出发,对基于真实IPv6源地址的网络寻址体系结构的域间、域内和接人子网3个层面的实现策略和关键进行了说明,并详细介绍了自治域间真实源地址验证方法的原理机制和技术实现。更多还原

【Abstract】 With the increasing scale and complexity of the size and applications grow so quickly that security flaws and low trustworthy is challenging and restricting the development of Internet.For the sake of the secure operation and sustainable development of the Internet,next generation Internet must focus on the trustworthy and reliableness.The foundation of trustworthy is authenticated source IP address.From the point of view of architecture,this paper introduces the implementation schemes and key technologies of the IPv6 source address validation architecture(SAVA).SAVA was divided into three levels:first-hop, local subnet source address validation,intra-domain source address validation,and inter-domain source address validation, which are explained and discussed successively in this paper.Specially,we also introduce the key scheme and technology implementation of inter-domain authenticated source address validation solution in details.更多还原