基于时空动态性的MANETs入侵防御模型

移动自组网(Mobile Ad Hoc Networks,MANETs)的固有特性(如有限资源、动态拓扑等)使其比有线网络更易遭受各种安全威胁。现有的MANETs安全技术不能有效适应这些特性,尤其是不能在网络性能和网络安全之间保持平衡。在MANETs时空动态性及其识别的基础上,构建了安全威胁和入侵防御收益与代价的量化评估指标体系,提出了一种系统化的MANETs入侵防御系统模型(IDMSLP),并实现基于网络安全和性能平衡的防御策略生成与防御性能优化方法。通过比较分析,IDMSLP可有效地克服已有MANETs安全技术存在的缺陷,可适于MANETs应用。

Intrusion Defense Model Based on Space-time Characteristics in MANETs

The inherent characteristics such as restricted bandwidth and dynamic topology in mobile Ad Hoc networks (MANETs) make them be more vulnerable than the wired networks. However, the existing security technologies for MANETs are almost unfit for these characteristics. Especially, they couldn"t keep the balance between network performance and network security. On the basis of analysis of the space-time dynamic properties and their identifications, the quantization evaluation index system for security threats and intrusion defense were established for MANETs. Then a systemic intrusion defense model for MANETs, named IDMSLP, was presented. Moreover, the defense strategies generation and defense performance optimization based on the balance of network security and network performance was achieved. The analysis and comparison for IDMSLP indicate that the proposed system can meet application of MANETs.