卫星互联网传输路径攻击及防御机制研究  

Research on Satellite Internet Forwarding Path Attack and Defense Mechanism

作　　者：付松涛[1] 杨爱玲[2] 邹乾友 高镇[1] 冯仲伟 FU Songtao;YANG Ailing;ZOU Qianyou;GAO Zhen;FENG Zhongwei(Unit 61655 of PLA,Chongqing 400035,China;Unit 32033 of PLA,Haikou Hainan 571100,China)

机构地区：[1]中国人民解放军61655部队,重庆400035 [2]中国人民解放军32033部队,海南海口571100

出　　处：《通信技术》2024年第10期1072-1078,共7页Communications Technology

摘　　要：卫星互联网被广泛认为是未来第6代移动通信技术(6th Generation,6G)网络的重要组成部分。为提升卫星互联网的安全性,针对卫星互联网传输路径实施的攻击手段,提出一种基于路径验证的防御机制,并在卫星互联网网关与路由节点间建立逐分组验证策略,使网关能够实时识别恶意流量,从而阻断或降低攻击危害。该机制具有兼容性好、低开销和高可靠等特点。仿真试验证明了其可行性,为提升卫星互联网安全性提供了支撑。Satellite Internet is widely believed to play a crucial role in future 6G(6th Generation)network infrastructure.To enhance the security of satellite Internet,according to the means of attack implemented on the transmission path of satellite Internet,this paper proposes a defense mechanism based on path verification and establishes a per-packet verification strategy between satellite Internet gateways and routers,enables gateways to identify malicious traffic in real-time and thus block or reduce the impact of attacks.The mechanism features good compatibility,low cost and high reliability.Simulation experiments demonstrate its feasibility and provide support for enhancing the security of satellite Internet.

关 键 词：卫星互联网 网络层 传输路径攻击 路径验证 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]