The Analysis and Design of Network Security Tools of IPv6

Since the performance and analysis ability of traditional security tools can not adapt to the demands of IPv6, new analysis engine and detection module are needed to add to them to improve the overall efficiency and performance of a security system. This paper proposes an integrated model in network intrusion detection system (NIDS), firewall and vulnerability scanning, which achieves communication among various components through linkage interface between vulnerability scanning and intrusion detection system (IDS) and linkage interface between IDS and firewall. A distributed firewall model is also presented based on our integrated model, on which the communication mechanism, the packet forward module and the load adjustment module are detailed described.