Design And Implementation Of A Lightweight Security Mechanism In The Environment Of The Internet Of Things

With the development of the information industry and the construction of communication infrastructure,the scale of the Internet of Things(Io T)has rapidly expanded,and its application fields have become more and more extensive,gradually becoming an important part of the information industry.With the increasing importance of the Internet of Things,how to ensure the security of the Internet of Things communication and system security is very important for long-term development of the Internet of Things.Most of the terminal devices in the Internet of Things environment are resourceconstrained devices,and resources such as computing and memory are very limited.At the same time,the performance of different types of terminal devices varies greatly.Based on the above characteristics,according to the difference in device performance,Io T terminal devices are divided into two categories.The devices with stronger performance and can afford the overhead of basic encryption and decryption algorithms and devices with weaker performance that can only complete their own tasks,respectively,design corresponding mechanisms.For devices with higher performance,the design adopts lightweight communication security protection,and for devices with lower performance,detection and filtering are performed through the device anomaly detection mechanism on the server side.Therefore,the research and design of the above two parts constitute the main content of this article.The main work of the thesis is as follows:(1)Lightweight communication security mechanism for Io T terminal devices.Analyze the hierarchical structure,main functional modules and specific implementation of the existing typical secure communication protocol SSL(Secure Sockets Layer),and perform performance testing and security analysis on commonly used encryption algorithms through the embedded development platform ESP8266.Based on the limited resources of Io T terminal equipment,a lightweight secure communication framework is given,and a protocol handshake process is designed.At the same time,in accordance with the differences in equipment resources and the security requirements of different communication tasks in the Internet of Things environment,a dynamic communication security level mechanism with configurable parameters is designed,and the fairness and security of the algorithm are analyzed through simulation experiments,and given Parameter setting recommendations.(2)Device abnormal behavior detection mechanism under the Internet of Things.Aiming at the unprotected weak performance equipment under the Internet of Things system,the existing anomaly detection research is analyzed,clustering algorithm is selected as the analysis method of equipment behavior characteristics,and an anomaly detection model based on clustering is given.Considering the characteristics of the multidensity distribution of the communication data of the Internet of Things devices,the existing density-based clustering algorithm is improved,and the above-mentioned model and the scene of device abnormal behavior identification are combined to give the device abnormal behavior detection process.The detection effect is verified by simulation experiments,and the experimental results prove that the improved algorithm has good clustering effect in multi-density and single-density distribution data sets,and at the same time has a good anomaly detection effect in the KDD99 data set.