MANET下基于多特征的虫洞检测技术研究

发布时间：2018-01-17 02:01

本文关键词：MANET下基于多特征的虫洞检测技术研究　出处：《西安电子科技大学》2014年硕士论文　论文类型：学位论文

【摘要】：MANET(Mobile Ad Hoc Network)是一种在没有固定基础设施的情况下,由系统中通信结点通过分布式协议互连或组织起来的自适应、自组织的无线对等网络,具有组网便捷、抗毁性强、经济节约等特性,被广泛运用于战场通信、紧急援救、临时办公和会议等军事与民用环境中。但是,由于其自身的无线链路、动态拓扑、分布式协作等特殊性质,使得MANET网络容易遭受到多种类型攻击,如虫洞攻击、拒绝服务、黑洞攻击、灰洞攻击等。其中,虫洞攻击是成对共谋节点对MANET路由算法发起的一种恶意攻击,会造成扰乱路径选择等严重危害,由于该攻击隐蔽性强、方式多样,对虫洞攻击的检测防御具有一定的困难性,因此虫洞攻击防御研究一直是国内外研究热点之一。本文对MANET网络中虫洞攻击的检测方法进行了研究,具体工作如下：首先分析了MANET网络路由算法的特点和当前虫洞攻击检测技术的研究现状,对比了已有各种虫洞检测方案的优缺点。然后,结合MANET网络和AODV路由协议的特征,对显式和隐式虫洞攻击的异常特征进行了具体分析,并总结提炼出了虫洞所特有的一些攻击特征：包括有节点消失、邻居数变化异常、路由跳数变化异常、长时间保持邻居等。在这些特征的基础上,本文提出了一种新颖的基于多特征的虫洞检测方案,该方案通过引入超级节点周期性收集全网各节点的邻居信息,通过综合处理获得网络拓扑信息与节点运动信息,并根据这些信息判别是否匹配虫洞异常特征,经过多个特征的匹配转移达到准确全面的虫洞检测目的。最后,在NS2仿真平台下进行了该方案的仿真实验,实验结果表明该方案能够有效快速地检测出显式、隐式虫洞攻击。
[Abstract]:MANET(Mobile Ad Hoc Network is one that does not have a fixed infrastructure. Self-organized wireless peer-to-peer networks, which are interconnected or organized by distributed protocols by communication nodes in the system, are widely used in battlefield communication due to their advantages of convenient networking, strong survivability and economic saving. Emergency rescue, temporary office, conference and other military and civilian environments. However, due to its own wireless links, dynamic topology, distributed collaboration and other special properties. MANET network is vulnerable to many kinds of attacks, such as wormhole attack, denial of service, black hole attack, gray hole attack and so on. Wormhole attack is a malicious attack on MANET routing algorithm launched by pairs of collusion nodes, which will cause serious harm such as disturbing path selection, because of its strong concealment and various ways. It is difficult to detect and defend wormhole attack, so the research of wormhole attack defense has been one of the hotspots at home and abroad. In this paper, the detection method of wormhole attack in MANET network is studied. The specific work is as follows: firstly, the characteristics of MANET network routing algorithm and the current research status of wormhole attack detection technology are analyzed, and the advantages and disadvantages of existing wormhole detection schemes are compared. Combined with the characteristics of MANET network and AODV routing protocol, the abnormal features of explicit and implicit wormhole attacks are analyzed in detail. And summarized and extracted some unique attack characteristics of wormhole, including node disappearance, neighbor number change anomaly, routing hop number change anomaly, long time to maintain neighbors, etc. On the basis of these characteristics. In this paper, a novel wormhole detection scheme based on multiple features is proposed, in which the neighbor information of each node is collected periodically by introducing super nodes. Through comprehensive processing to obtain network topology information and node movement information, and according to these information to determine whether to match the abnormal features of wormhole, through the matching of multiple features to achieve the accurate and comprehensive purpose of wormhole detection. The simulation results on NS2 platform show that the scheme can detect explicit and implicit wormhole attacks effectively and quickly.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN915.08

【共引文献】