Research On Intrusion Detection Method In Space Information Network

With the deep study of spatial information network architectures and key technologies in recent years,the security problem of spatial information network has drawn worldwide attention including academia,and industry.There are all kinds of security threats in space information network.Aiming at the security problem of in space information network,detecting network intrusion behavior or attack and alerting in time are the prerequisite of ensuring the safety of task information transmission.In this paper,through the analysis and study of space information network,and according to the characteristics of space information network,we made the corresponding analysis and research of intrusion detection algorithm,in view of two types of specific attacks in space information network.For Malicious code attack,an improved malicious code intrusion detection algorithm based on target tree is presented in this paper.The proposed algorithm is the improvement of detecting algorithm of traditional target tree.And comprehensive analysis is made to calculate the risk value of each node in the tree.On the basis of the above analysis and calculation,we can get the most likely attack roadmap of each kind of attack by the most likely attack roadmap algorithm.Finally,the satellite system can realize the quick determination of the malicious code attacks formed by joint cooperation behaviors step by step according to the most likely attack roadmap algorithm.At the same time,optimize the space information network resource depletion greatly by setting the cache optimization mechanism.Aiming at the attack that causes abnormal traffic and according to the characteristics of space information network,we do dimension reduction processing to the characteristics in the common traffic model.And use characteristics as fewer as possible to fully describe the change of the network flow.Therefore,reduce resource depletion in the space information network as far as possible.And then,we use the improved correlation detection method to do abnormal traffic detection.We detect DDOS attack according to the multi-dimensional traffic metrics of after dimension reduction.The presented method has the lower miss rate,meanwhile,improves the detection precision.Finally,the simulation proves that the algorithms proposed in this paper can detect the corresponding attacks efficiently with lower resources consumption of space information network.