基于NS2的BACnet网络DoS攻击仿真研究

Simulation of DoS Attack to BACnet Based on NS2

BACnet是楼控网络领域唯一的ISO标准;NS2是目前广泛使用的一种面向对象的基于离散事件驱动的网络仿真工具。随着BACnet网络与IP网络的集成,使得BACnet网络面临更多与传统IP网络相同的安全威胁。文中利用NS2仿真软件对BACnet网络的安全威胁进行研究,首先阐述了BACnet网络层协议数据单元(NPDU)的结构,给出了在NS2中添加一个简化的BACnet分组头、路由表和代理的详细过程和代码;在此基础上通过一个BACnet网络层DoS攻击及其防范策略的仿真实验,验证了这些代码的正确性,仿真结果真实有效,从而论证了使用NS2对BACnet网络安全问题进行仿真研究的可行性和有效性。

BACnet is the only standard of ISO in the area of building control network.NS2 is an object-oriented simulator based on discrete event drive.With the integration of BACnet network and IP network,BACnet network faces more security threaten like IP network.This paper researches these security threaten of BACnet with NS2.First it gives the structure of NPDU（Network Protocol Data Unit） of BACnet,describes the process and the code of a simple packet header,route table and agent of BACnet in NS2.At the end,it includes an experiment of DoS of BACnet,gives the countermeasure to the DoS then simulates it.It proves the validity of these codes,the simulation result is veracious and effective.The conclusion proves the availability of research security of BACnet with NS2.