Study Of Embedded Router Based On MIPS NetWork Security Monitoring System

Embeded routers are communication equipments that connects users to the network. With the rapid development of the internet of things(Io T), the demand on network security is much stronger. Study on the technology of network security monitoring system based on embedded routers thus emerges in this context. This study is aimed at the problem of the high cost and low performance of existing security routers, particularly on the problem that existing systems can only cover a small portion of attacks and have a low success rate of protection.In this paper, the realization of the monitoring system mainly includes the construction of system foundational platform and the implementation of the core functions. The foundational platform is realized by building the embedded Linux environment, JFSS2 flash file system, Protobuffer data serialization analysis, netfilter/iptables packet filtering kernel. The core function of network security monitoring system is composed by a Go Web server, system defense module, i Phone and i Watch client software. The Go Web server is the hub of communication for terminal interactions, using the principle of symmetry in encryption and serializing the communication data by protobuffer, which achieved the goal of preventing hackers from intercepting and tamper the communication data. The defense function of the system is realized by ipt_connlimit technology against network speed attack, the ipt_recent technology module against wireless network attack and the detection algorithm of 360 cloud platform against malicious URLs. The i Phone ? i Watch client software are combined with i OS APNS push technology to realize the system's push alarm message module, and can push the alarm message timely to notify the user when the network is under attack.The aforementioned technology was tested using Apache ab and Aircrack-ng tools to simulate the network attack, to monitor the state of each system module and to generate experimental results and performance analysis.The data shows that the network security monitoring sytem designed in this paper can not only protect the data communication within the router, but also prevent ordinary network attacks. As a result, this project is of certain reference value for engineering.