Research Of Intrusion Detection Technology For Satellite Communication Network

Because of the advantages of large coverage area and the weak effect by geographical environment,satellite communication has been widely used,with the development of communication technology.But it is accompanied with satellite communication network security issues.Illegal invasion behavior could bring serious damage of satellite communication network security.Intrusion detection technology is more widely applied on the Internet,but use less on satellite communication network.Satellite communications network's requirements for the real-time performance and detection efficiency of intrusion detection technology are higher,so in the satellite communication network research of intrusion detection technology is particularly important.This paper studies the satellite communication network distributed intrusion detection system and designes the satellite nodes intrusion detection module and the earth station node intrusion detection module.Since satellite nodes are seriously constrained in the space and the processing ability is limited.The main processing of the satellite communication network intrusion detection technology is on earth station node.Satellite nodes intrusion detection modules include data acquisition module,responding module and communication module.Earth station node adopts hierarchical structure,divided into sensor layer,data analysis layer,expression layer,and each layer is respectively designed as module.In this paper,we use the misuse intrusion detection mechanism,while allowing extending various intrusion detection rules.Rule base is used to match and detect packets,which determines whether to intrusion behavior.Pattern matching is the core of the intrusion detection.For the characteristics of big data traffic in satellite communication network and high real-time performance and the deficiency of existing BM pattern matching algorithm,we propose the idea,which pattern matching performs alternately from both sides to improve the matching efficiency of the intrusion detection.At the same time we use the protocol analysis to reduce the amount of data pattern matching.Finally,in the satellite communication network intrusion detection system base on Snort is designed,and the simulation results verify the feasibility and effectiveness of the improved technology.