基于改进阻塞判别算法的物联网安全风险溯源方法  

Internet of Things Security Risk Traceability Method Based on Improved Blocking Discrimination Algorithm

作　　者：高山[1] 张涛[1] 杨海彬 GAO Shan;ZHANG Tao;YANG Haibin(Beijing Tiantan Hospital,Capital Medical University,Beijing 100070,China)

机构地区：[1]首都医科大学附属北京天坛医院,北京100070

出　　处：《微型电脑应用》2024年第12期272-275,共4页Microcomputer Applications

摘　　要：物联网智能终端设备操作系统、内置Web应用、数据库等存在安全漏洞,但可溯源的安全风险种类较少、漏检较多。因此,设计一种基于改进阻塞判别算法的物联网安全风险溯源方法。基于流量采集技术与大数据技术,设计由实时监控模块、数据拦截、上链模块以及链下可信平台模块构成的物联网接口数据采集平台,进行了应用程序接口的深度协议分析。基于改进的阻塞判别算法,构建物联网应用程序编程(API)接口可用性风险分析模型,进行API接口可用性风险分析。搭建API接口数据流转安全风险溯源平台,完成物联网安全风险溯源。实验结果表明,所提方法能够达到91%以上的溯源准确率。There are security loopholes in the operating system of intelligent terminal devices in the Internet of Things,built-in Web applications and databases,etc.,but there are fewer types of traceable security risks and more missed tests.Therefore,a traceability method for security risks of the Internet of Things based on improved blocking discrimination algorithm is designed.Based on the traffic collection technology and big data technology,the data collection platform of the Internet of Things interface is designed by composing real-time monitoring module,data interception uplink module and offline trusted platform module,and the in-depth protocol analysis of the application program interface is carried out.Based on the improved blocking discrimination algorithm,an analysis model of the usability risk of the Internet of Things application programming interface(API)interface is constructed,and the usability risk of the API interface is analyzed.An API interface data flow security risk traceability platform is built to complete the Internet of Things security risk traceability.The experimental results show that the traceability accuracy of the proposed method can reach over 91%.

关 键 词：改进阻塞判别算法 物联网 Rootkit监控 安全风险溯源 IP地址解析 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论]