Research Of Intrusion Detection System For Satellite Communication Network

With the progress of society and development of technology, the dependency of industries on communication technology becomes increasingly big. Due to the advantages including big coverage area, difficult to suffer from the influence of ground disasters, rapid construction speed, liable to achieve broadcasting and flexibility, satellite communication has been widely applied in lots of fields. Therefore, the security of satellite communication network has important significance. With the expansion of satellite network scale, illegal intrusion behavior has posed serious threats to satellite communication network. For guaranteeing the security of satellite communication, encryption technique is mainly adopted at present. However, encryption technique has deficiencies. Therefore, intrusion detection system was put forward on such basis to detect illegal intrusion behavior in satellite communication network.Intrusion detection technique is the most important network security guarantee technique after firewall. This paper mainly established intrusion detection system of satellite communication network to detect illegal intrusion behavior in satellite communication. Satellite communication network mainly includes satellite node and ground station node. In view of the limitation of satellite processing capability, the intrusion detection of satellite communication system shall be mainly conducted at ground station node. This paper put forward one design scheme basing on Snort satellite communication network intrusion detection system, and regarded the design of ground station node as the priority of system design. It mainly designed one distributed intrusion detection system as per the structure of satellite communication network, and the system consists of three layers: expression layer, database server layer and sensor layer. Improvements were made on the algorithm of Snort pattern matching via analyzing the characteristics of big data flow in satellite communication network, which shortened matching time and improved the efficiency of intrusion detection system, thereby finally achieving the intrusion detection of satellite communication network via simulation experiment.