Research On Security Technology And Security Solution Of LonWorks Networks

American Echelon Corporation developed the LonWorks technology in 1991. With the advantages of openness, interoperability as well as the integrity of the system, the LonWorks technology has been widely applied in the fields of building and industrial automation and so on, and it has already been accepted by many standardized organizations such as ANSI, ASHRAE, IEEE as their criterion. In September 2006, the LonWorks technology became Chinese national standardization instructional technology document GB/Z 20177-2006. With the widely applications of LonWorks and the rapid development of Internet, LonWorks network becomes increasingly integrated with the Internet and the security problems of the Internet are becoming more and more important.This paper studies the LonWorks technology (the LonTalk protocol mainly), the network security technology, the NS2 network simulation technology. On the base of them, network security problems and their countermeasures of LonWorks network have been studied. The paper also analyses the network security problems and countermeasures in three different ways (Ethernet,BACnet and special gateway) which LonWorks are connected with Internet. In the end, simulating LonTalk protocol with NS2 simulator, this paper puts forward the topic of the LonWorks network security problems and their countermeasures for the first time, and this is the first paper to studiy the LonWorks security technology and security solution with NS2.The core part of LonWorks is LonTalk protocol, it strictly obeys the OSI/RM, it is similar to traditional network protocol. Through studying on LonWorks and LonTalk protocol as well as the traditional network security technique, we can find all kinds of security problems of LonWorks network from their differences. With the research and analysis of these problems, the author gives the countermeasures. Then, according to the different ways by which LonWorks are connected with Internet, the author offers the countermeasures to solve these problems respectively. Finally, with the help of the open source network simulation software NS2, we add the NPDU of LonTalk protocol into NS2 and implement partial function of LonTalk to validate the feasibility of countermeasures by simulation experiment.On the basis of the study of relative theory, this paper obtains the following achievements: Summarizing the security problems of LonWorks network at each level and proposing the corresponding security countermeasure;.offering the countermeasures to solve those network security problems according to the three different ways by which LonWorks are connected with Internet; implementing NPDU of LonTalk in NS2, and simulating the modifying root table attack and its countermeasure of network layer and confirming the countermeasure validity.Through the research of this paper, we may see that there are various security problems in LonWorks network. Some are similar to the information network and the others belong to LonWorks network only. These security problems are destructive to LonWorks network and the BAS based on it, and we must bring enough attention to them. In addition, it is feasible to use NS2 to simulate LonWorks network security problems and their countermeasures. These studies have not only developed the NS2 research areas and the LonWorks research methods, but also played a positive instructive role to the actual project network security plan.