| Because of the space information network’s inherent characteristics and susceptible to invasion and attack, many reliable security measures of the traditional network is no longer valid to it. Intrusion detection technology is the second line of the information security and is becoming a hot research in the field of space information network.This thesis has carried on the thorough research and analysis of traditional intrusion detection technology, combining with the characteristics of space information network, and put forward a intrusion detection system based on backbone nodes of space information network, and then researched the system from three aspects respectively, first in this paper, presents a distributed intrusion detection model based on the backbone nodes which as the center of the region of the hierarchical distributed intrusion detection system. By adopting detection technology in the combination of feature detection and anomaly detection, most attacks can be well avoided. Aiming at limiting resource in space information network, this paper puts forward an intrusion detection system of three models which can optimize the system and protect the network, save network resources to the greatest degree at the same time. Finally we analysis testing of several major attacks in space information network, and carry on the intrusion response. By isolating, segregating and routing reconstructing means to eliminate the scourge of invasion, to verify the validity and practicability of the system.In order to validate the proposed model, we use NS2 simulation platform to conduct simulation test of several main attack modes in space information network. By analysing the simulation results of packet loss rate, packet delivery ratio and network overhead, we can see that the intrusion detection system can effectively resist most attacks of the space information network, and can save the limit network resources well, and guarantee the safe running of the space information network. |
