High-Risk LEO Satellite Network Path Detection Based on Spatial and Temporal Delay Anomaly Analysis  

作　　者：Tianyu Zhang Hewu Li Jun Liu Lu Lu Qian Wu Shaowen Zheng Zeqi Lai Yuanjie Li 

机构地区：[1]Institute for Network Sciences and Cyberspace,Tsinghua University,Beijing 100084,China [2]Beijing National Research Center for Information Science and Technology,Beijing 100084,China [3]China Mobile Research Institute,Beijing 100053,China

出　　处：《China Communications》2023年第7期57-71,共15页中国通信（英文版）

基　　金：supported by National Key Research and Development Plan of China under Grant 2022YFB3105203;National Natural Science Foundation of China(62132009);key fund of National Natural Science Foundation of China(62272266);Tsinghua University-China Mobile Communications Group Co.,Ltd.Joint Institute;Zhongguancun Laboratory。

摘　　要：The gradual deployment of Low-Earth Orbit(LEO)mega constellations with inter-satellite links(ISLs)promises ubiquitous,low-latency,and high-throughput satellite network services.However,networked LEO satellites with ISLs are also at risk of routing attacks such as hijacking.Existing defenses against route hijacking in terrestrial networks can hardly work for the LEO satellite network due to its high spatiotemporal dynamics.To deal with it,we propose RPD,a high-risk routing path detection method for LEO mega-constellation networks.RPD detects abnormal high-risk LEO network paths by checking the consistency between the path delay and the geographical distance.This is efficiently achieved by combining in-band measurements and out-of-band statistical processing to detect the anomaly of the clustering feature in the reference delay matrix.RPD avoids the recalculation of the header cryptographic marks when the handover occurs,thus greatly reducing the cost and improving the performance of highrisk path detection.Experiments showed that the proposed RPD mechanism achieves an average detection accuracy of 91.64%under normal network conditions,and maintain about 89%even when congestion occurs in multiple areas of the network and measurement noise is considered.In addition,RPD does not require any cryptographic operation on the intermediate node,only minimal communication cost with excellent scalability and deployability.

关 键 词：LEO satellite networks route hijacking path verification risky path detection 

分 类 号：TN927.2[电子电信—通信与信息系统]