基于物联网技术的数字化校园网络安全防御系统设计  

Design of the digital campus network security defense system based on the Internet of Things technology

作　　者：解晓盈[1] XIE Xiaoying(Yangling Vocational&Technical College,YangYing ShangXi 712100,China)

机构地区：[1]杨凌职业技术学院,陕西杨凌712100

出　　处：《自动化与仪器仪表》2023年第9期151-155,共5页Automation & Instrumentation

基　　金：《“双高”背景下高职院校融媒体对外宣传思想教育策略研究与实践》(SK22-77)。

摘　　要：针对校园网络设备易受木马病毒攻击,导致网络安全防御效果降低的问题。提出设计一个基于物联网技术的数字化校园网络安全防御系统。首先,基于可信物联网设备和i.MX6q开发板,搭建基础可信物联网设备原型系统;然后在原型系统的基础上搭建一个基于TrustZone的可信物联网设备系统,通过TrustZone的安全和可信混合启动技术保证系统启动阶段的完整性。实验结果表明,设计的原型系统功能完善,具备可行性。且Flash Bootloader的安全启动模块运行时间占Bootloader启动时间的比例为0.89%,OP-TEE OS的可信启动模块运行时间占OP-TEE OS启动时间的比例为37.79%,对比于OP-TEE OS的可信启动模块,Flash Bootloader的安全启动模块对系统产生的性能影响较小。进一步验证提出的基于安全和可信混合启动技术可有效保证系统的完整性,从而增强系统安全性。The campus network equipment is vulnerable to Trojan virus attack,resulting in the reduction of network security defense effect.Proposed to design a digital campus network security defense system based on the Internet of Things technology.First,build the basic IoT device prototype system based on the reliable IoT device and i.MX 6 q development board;then build a TrustZone system based on the prototype system to guarantee the integrity of the system startup stage through the mixture of security and trusted startup technology of TrustZone.The experimental results show that the designed prototype system has perfect function and feasibility.In addition,the running time of the safe start module of Flash Bootloader accounts for 0.89%of Bootloader,and the running time of the trusted start module of OP-TEE OS is 37.79%.Compared with the trusted start module of OP-TEE OS,the safe start module of Flash Bootloader has little impact on the performance of the system.Further verification of the proposed hybrid based security and trusted startup technology can effectively ensure the integrity of the system,thus enhancing system security.

关 键 词：物联网 安全防御 TRUSTZONE 安全和可信混合启动 完整性度量 

分 类 号：TP392[自动化与计算机技术—计算机应用技术]