The Research And Realization Of Attack Detection In The Space Ground Integrated Network

The space ground integrated network is a major scientific research project in the outline of China's 13th five-year plan and the 13th five-year national plan for scientific and technological innovation.The goal is to build a new satellite constellation Internet connecting earth and sky,which can provide users with Internet services that can be accessed anytime and anywhere.The positioning of the integrated network of heaven and earth makes it occupy an important position in the national economic life,so the research on the security of the space ground integrated network has great strategic significance.As one of the new satellite constellation Internet,the integrated network consists of a variety of heterogeneous networks with complex network structure,large bandwidth capacity,and many key nodes,and involves a variety of protocol conversion.Compared with the traditional satellite communication network,this kind of satellite constellation Internet faces more security risks.In this paper,the space ground integrated network is introduced in detail,and the possible security vulnerabilities are analyzed according to its characteristics.Then,the key nodes of the network and the possible security vulnerabilities in the communication protocol are respectively studied as follows.(1)Aiming at the security vulnerability of key nodes in the space ground integrated network,a kind of attack and defense scenario of TCP performance enhancement proxy(TCP PEP)is proposed.TCP PEP plays a role in enhancing the performance of TCP session in satellite communication network,which can reduce the influence of excessively long delay on TCP session in satellite communication network and improve the data transmission rate of TCP session.In the traditional satellite communication network,TCP PEP is relatively safe and not easy to be attacked by network,while the possibility of network attack is larger in the space ground integrated network.Through the study of the attack and defense scenario,it is hoped to provide some references for the network security protection of key nodes in the process of integrated network construction.(2)A simplified IPSec model based on IP over CCSDS is proposed for the security vulnerability of the communication protocol of the integrated heaven and earth network.Early space communication standards(CCSDS)SCPS agreement clan is the main system,including SCPS-SP was the only security agreement,with the continuous development of satellite communication technology,the CCSDS puts forward the concept of IP over CCSDS,abolished the SCPS agreement,to promote network protocol fusion between space and ground,in the network layer and above with TCP/IP is compatible with each other,using the safer IPSec to replace SCPS-SP in order to ensure network security,,but the volume is too big,IPSec is not suitable for space communications environment,In this paper,a simplified IPSec model suitable for space communication is obtained by modifying several aspects.