网络编码若干安全问题的研究

发布时间：2018-06-04 20:49

本文选题：污染攻击 + 网络编码　；参考：《复旦大学》2014年硕士论文

【摘要】：传统网络中的路由机制不能达到最大的信道利用率。为了达到理论上的最大速率,可以采用网络编码机制。网络编码机制允许网络中的中间节点对收到的信息进行编码。这一机制在网络中的运用,可以达到提高网络吞吐率,减少网络拥塞,提高可靠性等效果。然而,网络编码要求网络中的中间结点对所收到的包进行随机线性组合,因此,网络编码易受污染攻击的威胁。网络中有可能存在一些攻击者(恶意节点)。污染攻击是指这些恶意节点生成或者修改一些信息,并将损坏的信息注入通信网络。很少的被破坏的包就会造成大规模的的污染扩散,从而导致信宿节点不能正常解码所需的数据。此外,污染攻击会导致网络中的带宽以及计算资源大量消耗,从而降低网络的吞吐量。为了解决这个问题,本文基于密码学的方法,对网络编码中的安全问题,即污染攻击的防御进行了研究。主要成果如下：(1)构造了一个适用于单源网络编码环境的对称密钥加密方案。前人提出过使用对称密钥加密防御污染攻击的方案。然而,这些方案被攻破的概率是1/q,其中q是网络编码所用的域的大小。因此为了达到较高的安全性需要一个较大的域,而不能使用在网络编码中通常应用的大小为28的有限域。虽然有人提出过使用有限域中的迹函数来解决这个问题,然而这个方案只能运用在单代数据传输上。本文对其进行了改进,设计了一个使用迹函数的对称密钥加密方案。和以往的方案不同,本文中的方案适用于网络编码环境下的多代安全传输。(2)设计了一个适用于多源网络编码的混合加密方案。有人提出过适用于多源网络编码环境的公钥或者对称密钥加密方案,然而这些方案有许多缺点：有些具有较高的计算开销；而有些方案的中间节点不具有防御能力,因此有可能造成接收节点接收不到任何数据。而文中的混合加密方案则综合了公钥方案和私钥方案的优点。得益于混合加密技术的使用,该方案的计算开销比较小,中间节点具有防御能力,而且在线带宽开销比以往的方案小得多。中图分类号：TP393
[Abstract]:The traditional routing mechanism can not achieve the maximum channel utilization. In order to achieve the theoretical maximum rate, the network coding mechanism can be adopted. The network coding mechanism allows the intermediate nodes in the network to encode the received information. The application of this mechanism in the network can improve the throughput, reduce the network congestion and improve the reliability. However, network coding requires the intermediate nodes in the network to perform a random linear combination of the received packets. Therefore, network coding is vulnerable to the threat of pollution attacks. Some attackers (malicious nodes) may exist in the network. Pollution attack means that these malicious nodes generate or modify some information and inject the corrupted information into the communication network. A small number of corrupted packets will cause a massive spread of pollution, resulting in the failure of the host node to decode the required data normally. In addition, the network bandwidth and computing resources will be consumed by the pollution attack, which will reduce the throughput of the network. In order to solve this problem, based on the cryptographic method, this paper studies the security problem in network coding, that is, the defense of pollution attack. The main results are as follows: 1) A symmetric key encryption scheme for single source network coding environment is proposed. Previous studies have proposed a scheme of using symmetric key encryption to defend against pollution attacks. However, the probability of these schemes being breached is 1 / Q, where Q is the size of the domain used for network coding. Therefore, in order to achieve higher security, a large domain is required, rather than a finite field of 28, which is usually used in network coding. Although it has been proposed to use trace function in finite domain to solve this problem, this scheme can only be applied to single generation data transmission. In this paper, we improve it and design a symmetric key encryption scheme using trace function. Different from the previous schemes, the scheme in this paper is suitable for multi-generation secure transmission in the network coding environment. A hybrid encryption scheme for multi-source network coding is designed. Some people have proposed public key or symmetric key encryption schemes suitable for multi-source network coding environment. However, some of these schemes have many disadvantages: some have high computational overhead, and some schemes have no defense capability on intermediate nodes. As a result, it is possible that the receiving node will not receive any data. The hybrid encryption scheme combines the advantages of public key scheme and private key scheme. Thanks to the use of hybrid encryption technology, the computation cost of the scheme is relatively small, the intermediate node has defense capability, and the online bandwidth cost is much smaller than the previous scheme. Middle map taxonomy number: TP393
【学位授予单位】：复旦大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN915.08

【相似文献】