| With space communications and network technology progressing, thepace of informatization is no longer limited to the ground environment.Along with the civilianization and commercialization process of spacecommunications, the space network has gradually grown from a relativelyclosed proprietary system into a space communications system thatintegrates a variety of network structures including satellite network,mobile ad hoc network, wireless cellular network, terrestrial Internet, andeven deep-space network.Because of space communications’ intrinsic characteristics such ascomplex environment, wireless links and mobility of terminals, spacenetwork is facing a wide range of security threats and technologychallenges. As the development of space network is still in the growthstage, past researches focused more on radio frequency technology,transmission control, mobile switching, network routing, networktechnology and other areas relating to network performance. For theresearch on the security of space network is still insufficient, and thesubsistent security mechanism are not feasible to be applied on theparticular scene of space network.On the basis of summarization of previous space network securitytechnologies, this paper focuses the research on the space network basedon LEO, which mainly studies two kinds of network structure in threespace layers as the low-earth orbit layer, the near-earth space layer and thesurface layer: the satellite network and Mobile Ad Hoc Network. The maincontent and innovative achievements of the research in this paper aredivided into the following three aspects: 1. Study on safety system and safety technology of space network. Onthe basis of classical security system model, the OSI hierarchical model isselected for hierarchical and systematic analysis of the securityvulnerabilities, security threats and security mechanisms of the spacenetwork.2. Study on survivability networking technology for space network.The networking mechanism with strong survivability is an effectivedefense measure for physical attack, link shielding and other commonexternal attacks. This paper proposes a networking structure with strongsurvivability, which is HMSN (Hybrid MANET Satellite Network), andproposes a border gateway protocol for the interconnection of thisnetworking structure, which is BGP-HMSN (Border Gateway Protocol-HMSN). Finally, experimental simulation proves that HMSN has superiorperformance in terms of survivability and availability.3. Study on intrusion detection technology for space network.Intrusion detection technology is an effective means for detectingmalicious nodes in space network. This paper proposes an intrusiondetection system for space network, which is CIDS-S (CorrelationIntrusion Detection System-Space version). The system adopts anintrusion detection mechanism combining anomaly detection and featuredetection. In order to validate the effectiveness of the system, this papersuccessively proposes an anomaly detection algorithm based on finite statemachine and an adaptive black hole attack feature detection algorithm. Onthe basis of validating the effectiveness of both two algorithms, the twoalgorithms are loaded in CIDS-S, which achieves more superior detectioneffect and reduces the expense of detection to a certain extent. |
