一种基于无线路由器的IoT设备轻量级防御框架

发布时间：2018-02-12 05:13

本文关键词： 无线路由器 IoT设备安全防护网络流量　出处：《中国科学院大学学报》2017年06期 　论文类型：期刊论文

【摘要】：目前IoT(Internet of things,物联网)设备安全问题很多,然而由于IoT设备自身限制(嵌入式系统,资源紧张),传统PC的保护手段已经不再适用。提出一种基于无线路由器的IoT设备轻量级防御框架WRGuardian(wireless router guardian),利用家用无线路由器在网络流量的掌控能力和拓扑结构优势,从被动防御和主动防御两个方面入手,及时监测并阻断目前针对IoT设备的主要攻击行为,同时定期扫描检测安全问题并修复。该框架无需外部硬件或者修改设备原有系统,降低了部署难度和成本,有利于后期推广。实验结果显示WRGuardian能够有效对抗针对IoT设备弱口令、命令注入等主要攻击手段,且能排查修复已知风险,是一种低成本可行的轻量级防护方案。
[Abstract]:At present, IoT(Internet of things (Internet of things) equipment security problems are many, but due to the IoT device itself restrictions (embedded system, Because of the shortage of resources, the traditional methods of PC protection are no longer applicable. This paper presents a lightweight defense framework for IoT devices based on wireless routers, WRGuardian(wireless router guardian.Using the advantage of controlling network traffic and topology structure of home wireless routers, From two aspects of passive defense and active defense, the main attacks against IoT devices are monitored and blocked in time, and the security problems are detected and fixed regularly. This framework does not require external hardware or modify the original system of the equipment. The experimental results show that WRGuardian can effectively resist the main attack methods such as weak password, command injection and so on, and can check the known risk of repair. It is a low cost and feasible lightweight protection scheme.
【作者单位】：中国科学院大学网络空间安全学院;中国科学院信息工程研究所;北京邮电大学;东莞电子科技大学电子信息工程研究院;
【基金】：国家重点研发计划(2016YFB0801604) 国家自然科学基金(61303239) 广东省产学研合作项目(2016B090921001)资助
【分类号】：TN915.08;TP391.44

【相似文献】