基于特征融合的IPv6地址空间动态探测算法

您当前的位置：

首页 >

文章列表页 >

基于特征融合的IPv6地址空间动态探测算法

学术论文 | 更新时间：2026-01-28

- 基于特征融合的IPv6地址空间动态探测算法
- Feature-fusion-based IPv6 address-space probing algorithm
- 网络与信息安全学报 2025年11卷第6期页码：63-76
- 作者机构：
  
  1.华中科技大学网络与信息化办公室，湖北武汉 430074
  2.华中科技大学网络空间安全学院，湖北武汉 430074
- 作者简介：
  
  [ "王泽昊（2000- ），男，河南郑州人，华中科技大学硕士生，主要研究方向为网络安全、网络探测。" ]
  [ "李冬（1979- ），男，博士，湖北枣阳人，华中科技大学高级工程师，主要研究方向为计算机网络、软件定义网络、网络安全。" ]
  [ "于俊清（1975- ），男，博士，内蒙古赤峰人，华中科技大学教授、博士生导师，主要研究方向为数字媒体处理与检索、网络安全、多核计算与流编译。" ]
  [ "陈俊鑫（2002- ），男，浙江嘉兴人，华中科技大学硕士生，主要研究方向为网络安全、软件定义网络、网络探测。" ]
  [ "刘陶然（2000- ），男，湖北荆门人，华中科技大学硕士生，主要研究方向为网络恶意流量分类、IPv6地址生成。" ]
  [ "税帅策（2001- ），男，湖北恩施人，华中科技大学硕士生，主要研究方向为网络安全、可编程网络。" ]
- 基金信息：
  
  国家重点研发计划(2022YFB2901202)
- DOI：10.11959/j.issn.2096-109x.2025072
  中图分类号： TP393
- 收稿：2025-06-11，
  
  修回：2025-07-20，
  
  纸质出版：2025-12-25
- 稿件说明：
移动端阅览
王泽昊, 李冬, 于俊清, 等. 基于特征融合的IPv6地址空间动态探测算法[J]. 网络与信息安全学报, 2025, 11(6): 63-76.

WANG Zehao, LI Dong, YU Junqing, et al. Feature-fusion-based IPv6 address-space probing algorithm[J]. Chinese Journal of Network and Information Security, 2025, 11(6): 63-76.
王泽昊, 李冬, 于俊清, 等. 基于特征融合的IPv6地址空间动态探测算法[J]. 网络与信息安全学报, 2025, 11(6): 63-76. DOI： 10.11959/j.issn.2096-109x.2025072.

WANG Zehao, LI Dong, YU Junqing, et al. Feature-fusion-based IPv6 address-space probing algorithm[J]. Chinese Journal of Network and Information Security, 2025, 11(6): 63-76. DOI： 10.11959/j.issn.2096-109x.2025072.

摘要

IPv6巨大的地址空间使得传统IPv4暴力扫描技术不再可行，当前主流的解决方案难以应对复杂多变的IPv6地址空间。针对IPv6网络的动态性，提出一种基于特征融合的IPv6地址空间动态探测（feature-fused dynamic IPv6 probing

FFDIP）算法。FFDIP提取单个地址的编址特征对地址集进行分类，利用分段平衡空间模式表示对分类后的地址集建模并生成目标地址，并在探测过程中采取反馈机制动态调整探测资源的分配；同时将存量地址的特征持久化，通过特征融合算法将增量地址特征与存量地址特征相结合，生成目标地址集合，提高探测效率。为解决IPv6地址分配中的别名前缀问题，设计一种前缀自适应IPv6探测适配器（prefix-adaptive IPv6 probing adapter

PAIPA）。将网络前缀格式化，并采用别名前缀验证算法替换活跃地址探测算法，改变了传统的基于“检测”和“验证”的被动探测机制，实现了IPv6别名前缀的“主动探测”。实验结果表明：FFDIP在无存量地址场景和有存量地址场景均比DET、6Tree、Entopy/IP等算法有更高的命中率；将PAIPA应用于DET和6Tree算法，其在别名前缀探测中的命中率比在地址探测中有显著提升。

Abstract

The vast address space of IPv6 makes brute-force scanning techniques of traditional IPv4 networks no longer feasible. The current mainstream solution can not adapt to the complex and changeable IPv6 address space. In response to the dynamic nature of IPv6 networks

a feature-fused dynamic IPv6 probing (FFDIP) technology is proposed. FFDIP classifies addresses using individual address encoding features

models them via balanced spatial pattern representation to generate target addresses and dynamically adjusts resource allocation through feedback mechanisms during probing. By persisting stock address features

FFDIP integrates incremental addresses with stock data through feature fusion

to improve efficiency and reduce redundancy. Additionally

aiming at the problem of alias prefixes in IPv6

a prefix-adaptive IPv6 probing adapter (PAIPA) is designed. By formatting address prefixes and replacing the active address verification algorithm with an alias prefix verification algorithm

it changes the traditional passive probing mechanism based on "detection" and "verification"

realizes the "active probing" of IPv6 alias prefixes. Experiments show that FFDIP has a higher hit rate than DET

6Tree and Entopy/IP in both non-stock address scenarios and stock address scenarios. When PAIPA is applied to the DET and 6Tree algorithms

the hit rates in alias prefix detection are higher than those in address detection. FFDIP and PAIPA can significantly improve the efficiency of IPv6 address space detection.

关键词

Keywords

references

李果 , 何林 , 宋光磊 , 等 . 基于种子地址的IPv6地址探测技术综述 [J ] . 电信科学 , 2019 , 35 ( 12 ): 24 - 37 .

LI G , HE L , SONG G L , et al . Survey on IPv6 address scanning technology based on seed sources [J ] . Telecommunications Science , 2019 , 35 ( 12 ): 24 - 37 .

ULLRICH J , KIESEBERG P , KROMBHOLZ K , et al . On reconnaissance with IPv6: a pattern-based scanning approach [C ] // Proceedings of the 2015 10th International Conference on Availability, Reliability and Security . Piscataway : IEEE Press , 2015 : 186 - 192 .

FOREMSKI P , PLONKA D , BERGER A . Entropy/IP: uncovering structure in IPv6 addresses [C ] // Proceedings of the 2016 Internet Measurement Conference . New York : ACM , 2016 : 167 - 181 .

MURDOCK A , LI F , BRAMSEN P , et al . Target generation for Internet-wide IPv6 scanning [C ] // Proceedings of the 2017 Internet Measurement Conference . New York : ACM , 2017 : 242 - 253 .

LIU Z Z , XIONG Y Q , LIU X , et al . 6Tree: Efficient dynamic discovery of active addresses in the IPv6 address space [J ] . Computer Networks , 2019 , 155 : 31 - 46 .

SONG G L , YANG J H , WANG Z L , et al . DET: enabling efficient probing of IPv6 active addresses [J ] . IEEE/ACM Transactions on Networking , 2022 , 30 ( 4 ): 1629 - 1643 .

李果 , 何林 , 宋光磊 , 等 . 基于多层级分类和空间建模的IPv6活跃地址发现算法 [J ] . 清华大学学报(自然科学版) , 2021 , 61 ( 10 ): 1177 - 1185 .

LI G , HE L , SONG G L , et al . IPv6 active address discovery algorithm based on multi-level classification and space modeling [J ] . Journal of Tsinghua University (Science and Technology) , 2021 , 61 ( 10 ): 1177 - 1185 .

CARPENTER B , JIANG S . Significance of IPv6 Interface Identifiers: RFC 7136 [S ] . Fremont, CA : RFC Editor , 2014 .

CUI T , GOU G , XIONG G . 6GCVAE: gated convolutional variational autoencoder for IPv6 target generation [C ] // Proceedings of the 24th Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD 2020 ), Singapore . Cham : Springer International Publishing , 2020 : 609 – 622 .

CUI T Y , GOU G P , XIONG G , et al . 6GAN: IPv6 multi-pattern target generation via generative adversarial nets with reinforcement learning [C ] // Proceedings of the IEEE INFOCOM 2021 - IEEE Conference on Computer Communications . Piscataway : IEEE Press , 2021 : 1 - 10 .

HOU B N , CAI Z P , WU K , et al . 6Hit: a reinforcement learning-based approach to target generation for Internet-wide IPv6 scanning [C ] // Proceedings of the IEEE INFOCOM 2021 - IEEE Conference on Computer Communications . Piscataway : IEEE Press , 2021 : 1 - 10 .

YANG T , CAI Z P , HOU B N , et al . 6Forest: an ensemble learning-based approach to target generation for Internet-wide IPv6 scanning [C ] // Proceedings of the IEEE INFOCOM 2022 - IEEE Conference on Computer Communications . Piscataway : IEEE Press , 2022 : 1679 - 1688 .

YANG T , HOU B N , CAI Z P , et al . 6Graph: a graph-theoretic approach to address pattern mining for Internet-wide IPv6 scanning [J ] . Computer Networks , 2022 , 203 : 108666 .

LIU Q K , LI X . 6Former: transformer-based IPv6 address generation [C ] // Proceedings of the 2023 IEEE Symposium on Computers and Communications (ISCC) . Piscataway : IEEE Press , 2023 : 1142 - 1148 .

SONG G L , HE L , ZHU F Y , et al . AddrMiner: a fast, efficient, and comprehensive global active IPv6 address detection system [J ] . IEEE/ACM Transactions on Networking , 2024 , 32 ( 5 ): 3870 - 3887 .

宋光磊 , 张文健 , 林金磊 , 等 . 6EDL: 高效的大规模活跃IPv6地址探测系统 [J ] . 计算机学报 , 2024 , 47 ( 8 ): 1949 - 1969 .

SONG G L , ZHANG W J , LIN J L , et al . 6EDL: efficient large-scale active IPv6 address probing system [J ] . Chinese Journal of Computers , 2024 , 47 ( 8 ): 1949 - 1969 .

THOMSON S , NARTEN T , JINMEI T . IPv6 stateless address autoconfiguration: RFC 4862 [S ] . Fremont, CA : RFC Editor , 2007 .

ALT L , BEVERLY R , DAINOTTI A . Uncovering network tarpits with degreaser [C ] // Proceedings of the 30th Annual Computer Security Applications Conference . New York : ACM , 2014 : 156 - 165 .

GASSER O , SCHEITLE Q , FOREMSKI P , et al . Clusters in the expanse: understanding and unbiasing IPv6 hitlists [C ] // Proceedings of the Internet Measurement Conference 2018 . New York : ACM , 2018 : 364 - 378 .

0

浏览量

39

下载量

0

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

相关文章

暂无数据

相关作者

暂无数据

相关机构

暂无数据

⁰