面向IoT安全的MITM攻击防御机制研究  

Research on MITM Attack Defense Mechanism for IoT Security

作　　者：潘琛 周高超 张德喜[1] PAN Chen;ZHOU Gaochao;ZHANG Dexi(School of Information Engineering,Xuchang University,XuChang,461000,China;School of Economics and Management,Zhongyuan University of Technology,Zhengzhou 450007,China)

机构地区：[1]许昌学院信息工程学院,河南许昌461000 [2]中原工学院经济管理学院,河南郑州450007

出　　处：《许昌学院学报》2024年第2期113-117,共5页Journal of Xuchang University

基　　金：国家自然科学基金-青年科学基金项目(62101478)。

摘　　要：隐蔽性强及攻击方式灵活的中间人(Man-in-the-Middle Attack,MITM)攻击是当前物联网(Internet of Things,IoT)智能家居安全面临的最大安全隐患之一.从攻击与防御两个角度提出了基于上下文感知融合的物联网设备配对模型和基于熵的异构物联设备指纹生成机制,以对抗型思维并行开展监测与防御方案研究,实现了对隐藏安全威胁的感知与过滤,通过相似度阈值分析测试与评估模型的建立完成了设备安全性验证,具有较好的效果与优势.Man in the Middle Attack(MITM),which has strong concealment and flexible attack methods,is one of the biggest security risks faced by the current Internet of Things(IoT)smart home security.From the perspectives of attack and defense,a context aware fusion based IoT device pairing model and an entropy based heterogeneous IoT device fingerprint generation mechanism are proposed,and monitoring and defense solutions are studied in parallel using adversarial thinking,The perception and filtering of hidden security threats have been achieved,and the device security verification has been completed through similarity threshold analysis,testing,and evaluation model establishment,with good results and advantages.

关 键 词：IoT智能家居安全 MITM 上下文感知 安全威胁感知与过滤 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]