若干抗污染及窃听的安全网络编码方案

发布时间：2018-07-02 22:53

本文选题：网络编码 + 污染攻击　；参考：《福建师范大学》2014年硕士论文

【摘要】：2000年,Ahlswede等人首次提出了网络编码概念,它与传统单调的存储—转发路由工作方式有着明显的区别。因为网络编码容许中间节点在转发数据前先对来自上游不同链路上的消息数据进行编码操作,所以,网络编码理论可使组播网络达到“最大流最小割”定理规定的容量传输上界。此外,网络编码在降低节点能耗、改善网络负载均衡和巩固网络鲁棒性等方面均显示出其优越性。随着人们对网络编码的深入研究,它的安全性问题(信息窃听和数据污染)越来越受到关注。目前,研究人员基于密码学知识提出了许多抵抗信息窃听和数据污染的安全网络编码方案。然而这些方案大多以牺牲系统性能作为代价,如增大了编码的复杂度、降低了数据的传输速率以及增加了数据的冗余等,从而大大地降低了网络的吞吐量。如何在有效地提升网络的吞吐量和链路鲁棒性的同时,又能确保网络数据传输的安全性是网络编码研究领域一个很有意义的课题。本论文主要针对网络编码存在的信息窃听和数据污染两大类安全问题作了一些工作。本文首先对网络编码的基本概念和主要优缺点,作了简单地介绍,并简要地概括了国内外学者在网络编码安全性方面的研究成果及研究进展。其次,本文给出了一种抗窃听和污染的网络编码方案。该方案利用节点的私钥对数据进行加密以增强其安全性,有效地抵抗了窃听攻击；并且引入列表译码算法来抵抗污染攻击。同时对该方案进行了数值分析,分析结果表明：信源编码和信宿解码两方面的计算代价减小了,而且以接近1的概率达到弱安全要求。第三,本文提出了一种基于数字签名的网络编码(SCH NC)方案,新方案不仅能够解决污染攻击问题,而且能有效地确定出污染攻击源的位置,从而降低污染攻击对网络造成的影响。最后,本文通过引入快速的并行CRC校验码和消息时间戳的设计理念,给出了一种基于CRC校验码的防污染网络编码方案。从该方案的安全性方面和效率方面进行分析表明：网络编码、并行逆序CRC检验码和消息时间戳三者的结合可以有效地抵抗污染攻击和重放攻击,并且大大地降低节点的计算代价,提高了网络的吞吐量。
[Abstract]:In 2000, Ahlswede et al put forward the concept of network coding for the first time. Because network coding allows intermediate nodes to encode message data from different upstream links before forwarding data, Network coding theory can make multicast network reach the upper bound of capacity transmission stipulated by "maximum flow minimum cut" theorem. In addition, network coding has shown its advantages in reducing node energy consumption, improving network load balance and consolidating network robustness. With the deep research of network coding, its security (information eavesdropping and data pollution) has been paid more and more attention. At present, many secure network coding schemes are proposed based on cryptography knowledge to resist information eavesdropping and data pollution. However, most of these schemes are at the expense of system performance, such as increasing the complexity of coding, reducing the data transmission rate and increasing the data redundancy, thus greatly reducing the throughput of the network. How to improve the network throughput and link robustness while ensuring the security of network data transmission is a significant topic in the field of network coding research. In this paper, we focus on two kinds of security problems, information eavesdropping and data pollution, which exist in network coding. In this paper, the basic concepts, main advantages and disadvantages of network coding are briefly introduced, and the research results and progress in network coding security of domestic and foreign scholars are briefly summarized. Secondly, a network coding scheme against eavesdropping and pollution is presented. The scheme uses the private key of the node to encrypt the data to enhance its security, and effectively resists the eavesdropping attack, and introduces a list decoding algorithm to resist the pollution attack. At the same time, numerical analysis of the scheme is carried out. The results show that the computational cost of source coding and sink decoding is reduced, and the probability of close to 1 reaches the requirement of weak security. Thirdly, a digital signature based network coding (Sch NC) scheme is proposed. The new scheme can not only solve the problem of pollution attack, but also effectively determine the location of the source of pollution attack, thus reducing the impact of pollution attack on the network. Finally, by introducing the design idea of parallel CRC code and message timestamp, this paper presents a scheme of anti-pollution network coding based on CRC code. The analysis of the security and efficiency of the scheme shows that the combination of network coding, parallel inverse CRC check code and message timestamp can effectively resist the pollution attack and replay attack. And greatly reduces the node computation cost, improves the network throughput.
【学位授予单位】：福建师范大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】