Router advertisement attack prevention method, apparatus and device

A router and notification technology, applied in the field of communication, can solve the problem of being unable to effectively prevent RA attacks from malicious hosts, and achieve the effect of convenient, fast and accurate positioning

Inactive Publication Date: 2015-03-18
ZTE CORP
View PDF4 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0008] In view of this, the embodiment of the present invention provides a RA attack prevention method, device, and equipment to at least solve the problem that related technologies cannot effectively prevent RA attacks from malicious hosts

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Router advertisement attack prevention method, apparatus and device
  • Router advertisement attack prevention method, apparatus and device
  • Router advertisement attack prevention method, apparatus and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0067] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments may be combined with each other without conflict.

[0068] The embodiment of the present invention records an RA attack prevention method, Figure 1a It is a schematic diagram of the implementation flow of the RA attack defense method according to the embodiment of the present invention, as shown in Figure 1a shown, including:

[0069] Step 101: Determine the RA attacking host according to the received RA message.

[0070] When determining the RA attack host according to the received RA message, send an RS message to the host in the VLAN corresponding to the user side port through the user side port, and determine the host that returns the RA message to the user side port for the RS message as the host that performs the RA attack; or The ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

Disclosed is a router advertisement (RA) attack prevention method, a device, equipment and a computer storage medium, said method comprising: in accordance with a received RA message, determining an RA attack host; executing at least one of the following operations: notifying a network management system of RA attack host information; prohibiting a source Internet Protocol (IP) address from including a packet having a specific prefix and a sending packet of said determined RA attack host being forwarded to a network side, and redirecting said packet to an entrance server prompt page, said specific prefix being the prefix carried by the RA message sent by said RA attack host; instructing the access equipment of said RA attack host to prohibit the RA attack host from gaining network access; simulating said RA attack host attacker in sending a new RA message, said new RA message carrying a prefix which has a shorter lifetime than the lifetime of the prefix carried in the RA message sent by said RA attack host.

Description

technical field [0001] The present invention relates to communications, in particular to a router advertisement (RA, Router Advertisement) attack prevention method, device and equipment. Background technique [0002] With the rapid popularization of the Internet and the rapid development of data communication technology, the number of Internet Protocol (IP, Internet Protocol) terminals has increased sharply. The current Internet Protocol version 4 (IPv4, Internet Protocol version 4) public network addresses have been exhausted, and network address translation ( NAT (Network Address Translation) technology has many limitations in performance and application layer support. The popularity of Internet Protocol version 6 (IPv6, Internet Protocol version 6) technology with longer encoding length and more address space is of great importance to global operators and users. These are all major issues that must be addressed. [0003] The current difficulties restricting the populariz...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L29/06H04L63/0236H04L63/145H04L63/1466H04L65/1101H04L63/1441
Inventor 范亮朱承旭袁博
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products