移动自组网网络层入侵检测的研究与仿真

发布时间：2018-05-24 09:38

本文选题：移动自组网 + 网络层攻击　；参考：《东北大学》2014年硕士论文

【摘要】：移动自组网(MANET)是一种无中心控制、对固定基础设施没有依赖的新型无线网络,具有快速自治成网、部署灵活多变的特点,在应急通信和军事战术通信方面具有广阔的应用前景。但由于网络的拓扑结构变化频繁,无线介质开放和缺乏集中的监控机制,加之节点本身的能力有限使得网络很容易遭到攻击。入侵检测作为一项重要的网络安全技术,一直是当前移动自组网安全领域的研究热点。首先对目前的移动自组网进行了安全需求分析,指出了网络的安全目标,讨论和研究了网络层存在的安全弱点和面临的安全威胁,并对网络层可能存在的各种攻击总结出三大类,即路由类攻击、资源消耗类攻击和数据流量类攻击。然后详细的介绍了入侵检测的相关概念及基础知识,对移动自组网中入侵检测系统框架模型及技术的研究进展进行了重点综述。在此基础上提出一种基于按需路由协议的入侵检测算法,该算法结合按需路由协议的特点,包括三个部分：实时路由检测算法、分布式洪泛攻击检测算法和基于路径的丢包检测算法,能够针对网络层这三大类攻击进行有效的检测,保证网络的安全运行。在NS2仿真平台上对所设计的检测算法进行了仿真分析。仿真结果表明,该检测算法具有很好的检测性能并且开销很小,检测出攻击后对网络性能有了很好的改善。
[Abstract]:Manet (Mobile Ad Hoc Network) is a new wireless network with no center control and no dependence on fixed infrastructure. It has the characteristics of fast autonomous networking and flexible deployment. It has a broad application prospect in emergency communication and military tactical communication. However, due to the frequent changes of the network topology, the open wireless media and the lack of centralized monitoring mechanism, and the limited ability of the nodes themselves, the network is vulnerable to attack. Intrusion detection as an important network security technology, has been the current research hotspot in the field of mobile ad hoc network security. Firstly, the security requirements of the mobile ad hoc network are analyzed, the security target of the network is pointed out, and the security weakness and the security threat in the network layer are discussed and studied. There are three kinds of attacks in the network layer, namely, routing attack, resource consumption attack and data traffic attack. Then the related concepts and basic knowledge of intrusion detection are introduced in detail, and the research progress of intrusion detection system framework model and technology in mobile ad hoc network is summarized emphatically. On this basis, an intrusion detection algorithm based on on-demand routing protocol is proposed. The algorithm combines the characteristics of on-demand routing protocol, including three parts: real-time routing detection algorithm. The distributed flood attack detection algorithm and the path-based packet loss detection algorithm can effectively detect the three kinds of attacks in the network layer and ensure the network running safely. The designed detection algorithm is simulated and analyzed on the NS2 simulation platform. The simulation results show that the proposed algorithm has good detection performance and low overhead, and the network performance is improved after the attack is detected.
【学位授予单位】：东北大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN915.08

【相似文献】