基于软件无线电的超短波无线网络监测系统设计

发布时间：2018-04-27 06:11

本文选题：自组织网 + 超短波　；参考：《电子科技大学》2014年硕士论文

【摘要】：超短波无线自组织网络拥有快速组网、健壮性强的优点,在军事和民用通信中有着广泛应用前景的。但是其固有的暴露信道、动态拓扑和多跳路由等特点使其面临着消息欺骗、虚假路由、拒绝服务等无线网络安全威胁。因此,对自组织网进行无线网络监测,及时发现网络入侵行为非常必要。无线网络监测需要解决网络协议的分析、数据数据流的侦收和无线网络数据的分析三个问题。本文围绕着三个问题进行了220D协议的分析研究、基于软件无线电的无线数据捕获系统设计研究和入侵检测的研究,并完成了部分功能的设计和实现。本文的主要工作包括如下几个方面:第一,结合无线自组织网的特点,对无线自组织网的安全性进行分析,提出适合于无线自组织网的分布式监测系统设计方案。根据方案,引出需要解决的三个关键技术问题,并明确了技术问题的研究方法。第二,学习研究了MS-STD-188-220D协议标准。重点对220D的数据链路帧、网络层帧的结构和数据包的逐层封装过程进行分析,研究了针对220D/IP网络的协议解析方法。以FSK作为物理层调制方式,搭建一个220D实验平台,模拟220D数据包的收发过程,以作为网络监测的研究对象。第三,基于uSDR3500软件无线电平台,实现对220D实验平台产生的无线信号接收和解调。通过Simulink工具完成FSK接收机的仿真实验和链路设计。最终,将生成的比特文件下载到uSDR3500平台中,实现对FSK信号进行接收解调,获取到无线通信数据流。第四,进行入侵检测的研究,建立一种针对泛洪攻击的隐马尔可夫入侵检测模型。以UDP流量负载变化作为隐马尔可夫模型的观测值,建立具有三个隐含状态的隐马尔可夫入侵检测模型。使用NS-2仿真获取的学习和评估数据包,对隐马尔可夫入侵检测模型进行训练和评估,完成检测模型的可行性验证,分析模型的检测性能。
[Abstract]:Ultra-short wave wireless ad hoc networks have the advantages of fast networking and strong robustness, and have wide application prospects in military and civil communications. However, its inherent characteristics such as exposed channel, dynamic topology and multi-hop routing make it face the security threats of wireless networks such as message spoofing, false routing, denial of service and so on. Therefore, it is necessary to monitor the wireless network and discover the intrusion behavior in time. Wireless network monitoring needs to solve three problems: network protocol analysis, data stream detection and wireless network data analysis. This paper focuses on the analysis of 220D protocol, the design of wireless data capture system based on software radio and the research of intrusion detection, and completes the design and implementation of some functions. The main work of this paper includes the following aspects: first, combining the characteristics of wireless ad hoc network, the security of wireless ad hoc network is analyzed, and the design scheme of distributed monitoring system suitable for wireless ad hoc network is proposed. According to the scheme, three key technical problems need to be solved, and the research methods of technical problems are clarified. Secondly, we study the standard of MS-STD-188-220D protocol. The data link frame, network layer frame structure and packet encapsulation process of 220D data link frame are analyzed, and the protocol parsing method for 220D/IP network is studied. A 220D experimental platform is built with FSK as the physical layer modulation mode to simulate the receiving and sending process of 220D data packet, which can be used as the research object of network monitoring. Thirdly, based on uSDR3500 software radio platform, the wireless signal received and demodulated from 220 D experimental platform is realized. The simulation experiment and link design of FSK receiver are completed by Simulink tool. Finally, the generated bit file is downloaded to the uSDR3500 platform to receive and demodulate the FSK signal and obtain the wireless communication data stream. Fourthly, a hidden Markov intrusion detection model for flooding attack is established. Taking the change of UDP traffic load as the observed value of hidden Markov model, a hidden Markov intrusion detection model with three hidden states is established. The hidden Markov intrusion detection model is trained and evaluated using the learning and evaluation packets obtained by NS-2 simulation. The feasibility of the detection model is verified and the detection performance of the model is analyzed.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN98

【参考文献】