文档介绍：puter Emergency Response puter Emergency Response ??基本原理基本原理??方案设计方案设计??相关分析相关分析??小结小结问题的提出问题的提出??完整的安全框架包完整的安全框架包含三个对象之间的含三个对象之间的关系关系––端用户端用户----端用户端用户––ISP--ISP--端用户端用户––ISP--ISP ISP--ISP 主要问题与对应解决方案主要问题与对应解决方案??端用户端用户----端用户端用户––主要问题主要问题??信息的完整性;信息的完整性;??信息的保密性;信息的保密性;––解决方案解决方案??IPSecIPSec??ISP--ISP--端用户端用户––主要问题主要问题??用户上网的可控性;用户上网的可控性;??用户上网的可审计性;用户上网的可审计性;––解决方案解决方案??认证策略;认证策略;??计费策略;计费策略;??ISP--ISP ISP--ISP ––主要问题主要问题??地址欺骗(如地址欺骗(如DDoSDDoS攻击);攻击);––解决方案解决方案??地址分配地址分配----确认策略;确认策略;IPv6IPv6地址结构地址结构??前缀前缀––分配方案分配方案??后缀后缀––分配方案分配方案接口标识符子网标识符路由前缀64位64-n 位n 位IPv6IPv6地址结构地址结构??Public Topology:48Public Topology:48––FP, Fixed Prefix, 001, 3FP, Fixed Prefix, 001, 3––TLA ID, Top-Level Aggregation Identifier, 13TLA ID, Top-Level Aggregation Identifier, 13––RES, Reserved, 8RES, Reserved, 8––NLA ID, Next-Level Aggregation Identifier, 24NLA ID, Next-Level Aggregation Identifier, 24??Site Topology:16Site Topology:16––SLA ID, Site-Level Aggregation Identifier, 16SLA ID, Site-Level Aggregation Identifier, 16??Interface Identifier:64Interface Identifier:64––Interface IDInterface ID地址配置方式地址配置方式??ManualManual??AutoconfigurationAutoconfiguration––StatelessStateless––StatefulStatefulAddress Address AutoconfigurationAutoconfiguration??Stateless address Stateless address autoconfigurationautoconfiguration––No central server needed to aid in address No central server needed to aid in address configurationconfiguration––Node forms its own suffix, checks if it is uniqueNode forms its own suffix, checks if it is unique––Node obtains Node obtains prefix(esprefix(es) from the nearest router) from the nearest router??StatefulStateful address address autoconfigurationautoconfiguration––Central server allocates full addresses to nodes on Central server allocates full addresses to nodes on requestrequest––DHCPv6 is the current protocol for DHCPv6 is the current protocol for statefulstateful address address autoconfigurationautoconfiguration混沌序列的性质混沌序列的性质??随机性:混沌序列的统计特性是随机