Design and Implementation of an IPv6-enabled Intrusion Detection System(6IDS)

Abstract

This paper presents our design and implementation of IPv6-enabled Intrusion Detection System (called 6IDS). To detect some novel IPv6 attacks, we employ signature-based technology to build our 6IDS which has a pre-analysis module built to parse different IPv6 packets and a simple matching algorithm as a detection engine. Webbased monitoring GUI and alert mechanism are also provided in this prototype. Some scenario-based testings are designed to test the effectiveness of 6IDS. We are excited at our preliminary results which do detect some ICMPv6 flood attacks and novel 4to6 DDoS attack. This is, to our knowledge, the first literature to discuss the design and implementation of IPv6-enabled Intrusion Detection System.