无线Mesh网络入侵检测关键技术研究  

Research of the Key Technologies for the Intrusion Detection System in Wireless Mesh Networks

作　　者：李宏建[1] 徐明[1] 李洋[2] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073 [2]中国科学院计算技术研究所,北京100080

出　　处：《计算机工程与科学》2009年第7期14-16,共3页Computer Engineering & Science

摘　　要：本文研究了无线Mesh网络的结构和特点,以及入侵检测系统(IDS)在构建安全WMN中不可替代的作用。深入分析了AdHoc网络IDS、跨层和网络故障检测技术特点以及无线Mesh网络自身的安全需求。在此基础上,本文结合网络故障检测与跨层技术提出了一种基于代理的非对称分布式协作IDS结构,对代理模块设计原则进行了详细分析。最后以MAC自私行为攻击为例对该结构进行了模拟。结果显示,该结构能够很好地适应无线Mesh网络。The architecture and characteristics of Wireless Mesh Networks （WMN）, as well as the significance of the intrusion detection system （IDS） in building secure WMNs are investigated. Based on an in-depth analysis of the IDS technologies in ad hoc networks, the technologies of cross-layer, and trouble shooting, a new architecture of asymmetric, distributed and cooperative IDS with the technologies of trouble shooting and cross-layer for WMNs based on the application of agents are proposed in the paper, and the design principle of the agent modules are analysed in detail ulteriorly. Finally, this new architecture of IDS in WMNs is simulated by the attack detection of the MAC selfish behavior in NS2. The result of simulation shows that the given new architecture of IDS fits WMNs well.

关 键 词：无线MESH网络 入侵检测系统(IDS) 非对称分布式协作 跨层 故障检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]