The Research Of Routing Attack Technology For GEO Satellite Communication Network

The rapid development of the satellite communication symbolizes the arrival of information age. Its wide use in the military and civilian fields comes with more increasingly frequent, heavy and high-level attacks. The safety and security of satellite communication is facing an increasingly severe challenge. This paper aims at finding the vulnerabilities of routing protocol based on the research on GEO satellite communication network routing attacking technology, so as to improve the security of GEO satellite communication network.Many of the routing protocols in GEO satellite communication network are OSPF(Open Shortest Path First) or special routing protocols based on OSPF. Therefore, the research is conducted mainly on OSPF routing protocol of GEO satellite communication network. This paper analyzes the security mechanism of the OSPF routing protocols and discusses the existing security vulnerabilities. After comparison, the paper chooses the method of infecting link-state information periodically that will be reached easily in the GEO satellite communication network. Then the paper proposes a new attacking method——injecting the error information to the network. The attack technology is resource-depletion DoS Attack. Its main characteristic is the attack on the control level of the OSPF protocol, therefore, it is easier to obtain the effect of attack. The attack technique generates large transient error link-state information instantaneously and the information will be sent to the adjacent OSPF routers to establish a router OSPF adjacency relationships. The presence of flood vulnerability makes related resources of the adjacent routers and other routers in satellite communication network quickly depleted, stopping the routers from proceeding the normal routing service. In this paper the attack technology is simulated. This paper establishes the satellite communication network consisting of three GEO satellites and ground stations through OPNET. Then the paper writes a puppet router of OSPF using C# and sends a lot of error link-state information to the adjacent routers. By comparing the attack method of injecting common IP packets into network, the paper concludes that it is easy to obtain the effect of attack by using the proposed attack method.