Treffer: 基于特征融合的IPv6地址空间动态探测算法.

The vast address space of IPv6 makes brute-force scanning techniques of traditional IPv4 networks no longer feasible. The current mainstream solution can not adapt to the complex and changeable IPv6 address space. In response to the dynamic nature of IPv6 networks, a feature-fused dynamic IPv6 probing (FFDIP) technology is proposed. FFDIP classifies addresses using individual address encoding features, models them via balanced spatial pattern representation to generate target addresses and dynamically adjusts resource allocation through feedback mechanisms during probing. By persisting stock address features, FFDIP integrates incremental addresses with stock data through feature fusion, to improve efficiency and reduce redundancy. Additionally, aiming at the problem of alias prefixes in IPv6, a prefix-adaptive IPv6 probing adapter (PAIPA) is designed. By formatting address prefixes and replacing the active address verification algorithm with an alias prefix verification algorithm, it changes the traditional passive probing mechanism based on "detection" and "verification", realizes the "active probing" of IPv6 alias prefixes. Experiments show that FFDIP has a higher hit rate than DET, 6Tree and Entopy/IP in both non-stock address scenarios and stock address scenarios. When PAIPA is applied to the DET and 6Tree algorithms, the hit rates in alias prefix detection are higher than those in address detection. FFDIP and PAIPA can significantly improve the efficiency of IPv6 address space detection. [ABSTRACT FROM AUTHOR]

IPv6巨大的地址空间使得传统IPv4暴力扫描技术不再可行，当前主流的解决方案难以应对复杂多变的IPv6地址空间。针对IPv6网络的动态性，提出一种基于特征融合的IPv6地址空间动态探测（feature-fused dynamic IPv6 probing, FFDIP）算法。FFDIP提取单个地址的编址特征对地址集进行分类，利用分段平衡空间模式表示对分类后的地址集建模并生成目标地址，并在探测过程中采取反馈机制动态调整探测资源的分配；同时将存量地址的特征持久化，通过特征融合算法将增量地址特征与存量地址特征相结合，生成目标地址集合，提高探测效率。为解决IPv6地址分配中的别名前缀问题，设计一种前缀自适应IPv6探测适配器（prefix-adaptive IPv6 probing adapter, PAIPA）。将网络前缀格式化，并采用别名前缀验证算法替换活跃地址探测算法，改变了传统的基于"检测"和"验证"的被动探测机制，实现了IPv6别名前缀的"主动探测"。实验结果表明：FFDIP在无存量地址场景和有存量地址场景均比DET、6Tree、Entopy/IP等算法有更高的命中率；将PAIPA应用于DET和6Tree算法，其在别名前缀探测中的命中率比在地址探测中有显著提升。 [ABSTRACT FROM AUTHOR]

Copyright of Chinese Journal of Network & Information Security is the property of Beijing Xintong Media Co., Ltd. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)