一种环境自适应的卫星网络安全路由协议  

Environmentally-adaptive secure routing protocol for satellite networks

作　　者：毕梦格 巨玉 侯蓉晖 BI Mengge;JU Yu;HOU Ronghui(School of Cyber Engineering,Xidian Univ.,Xi'an 710071,China;Science and Technology on Communication Network Laboratory,The 54th Research Institute of China Electronics Technology Group Corporation,Shijiazhuang 050081,China)

机构地区：[1]西安电子科技大学网络与信息安全学院,陕西西安710071 [2]中国电子科技集团公司第五十四研究所通信网信息传输与分发技术重点实验室,河北石家庄050081

出　　处：《西安电子科技大学学报》2020年第1期66-72,共7页Journal of Xidian University

基　　金：国家自然科学基金（61571351,61771296）;陕西省自然科学基金（2018JZ6006）;陕西省重点研发计划（2019ZDLGY12-08)

摘　　要：针对低轨卫星网络数据传输中存在的安全问题,设计了一种新型的安全路由协议。首先,协议从卫星行为属性与能力属性两方面联合考虑,建立面向业务类型的多维安全评估模型,依据网络状态对卫星的安全通信能力进行动态评估;然后,结合按需路由协议,以量化的卫星安全通信能力评估值为路由度量,建立安全通信路径;最后,实时监测传输路径中节点的转发行为,及时触发路由重构,以保障数据安全可靠地传输至目的节点。仿真结果显示,当网络中存在恶意节点时,所提协议相比现有协议在分组投递率、平均端到端时延及平均跳数等方面均有明显提升,能够有效地提升低轨卫星网络数据传输的安全性。In order to solve the security problem of data transmission in Low Earth Orbit(LEO)satellite networks,a novel secure routing protocol is designed.First,by considering two aspects of satellite behavior attribute and communication capability attribute,a multi-dimensional security evaluation model is established,and the model for evaluating the satellite security communication capability is dynamically adjusted with the network state.Then,combined with the on-demand routing protocol,the secure communication path is established by taking the quantitative evaluation of satellite security communication capability as the routing metric.Finally the forwarding behavior of nodes in the transmission path is monitored in real time,and the routing reconstruction is triggered as needed.Simulation results show that,compared with the existing protocol,the proposed protocol can significantly improve the performance of the packet delivery rate,average end-to-end delay and average hop than the existing protocol when malicious nodes exist in the network.The protocol can effectively improve the security of data transmission in LEO satellite networks.

关 键 词：卫星网络 安全路由 安全评估 层次分析法 

分 类 号：TN927[电子电信—通信与信息系统]