直通模式下TETRA系统协议层的无线入侵检测  

Wireless Intrusion Detection of TETRA System Protocol Layer in Direct Mode

作　　者：李泓艺 黄天禹 毛玲 高文滨 LI Hongyi;HUANG Tianyu;MAO Ling;GAO Wenbin(Southwest Jiaotong University,Chengdu Sichuan 610031,China)

机构地区：[1]西南交通大学,四川成都610031

出　　处：《通信技术》2021年第8期1987-1994,共8页Communications Technology

摘　　要：针对典型数字集群通信系统在通信过程中无线入侵的检测问题,利用协议自身特性以及外加辅助信息,提出了两种入侵检测方法。一是以陆上集群无线电(Terrestrial Trunked Radio,TETRA)系统为基础提取固定序列进行对比的干扰检测方法。此方法提取协议中所有固定序列作为干扰检测的判别条件集合,对接收到的协议报文提取对应位置的序列并进行对比,判别协议是否受到干扰。二是基于格雷互补序列的入侵检测方法。该方法在通信信息发送前在协议数据信息段插入具有特殊性质的格雷互补序列,用于辅助通信方检测协议信息是否被篡改,以及接收信息是否为恶意重放。仿真结果表明,以上两种方法能够较为准确地判别协议是否受到干扰,以及是否被篡改、重放,且算法简单易施。In order to solve the problem of wireless intrusion detection in typical digital trunked communication system, two intrusion detection methods are proposed based on the characteristics of the protocol and additional auxiliary information. One is an interference detection method based on terrestrial trunked radio system that extracts fixed sequences for comparison. This method extracts all fixed sequences from the protocol as a set of discriminant conditions for interference detection. The sequence of the corresponding position is extracted from the received protocol packet and compared to determine whether the protocol is interfered. The other is an intrusion detection method based on Gray complementary sequence. Gray complementary sequence with special nature is inserted into the protocol data information segment before the communication information is sent, which is used to assist the communicator to detect whether the protocol information has been tampered with and whether the received information is malicious replay. Simulation results indicate that the above two methods can accurately determine whether the protocol is interfered, tampered or replayed, and the algorithm is simple and easy to implement.

关 键 词：陆上集群无线电(TETRA)系统 干扰判别 固定序列 格雷互补序列 数据链路层 

分 类 号：TN929.5[电子电信—通信与信息系统] TP309.2[电子电信—信息与通信工程]