XSeluge:一个基于网络编码的安全在线代码分发算法

XSeluge:A Secure Online Code Dissemination Algorithm Based on Network Code

针对现有安全在线代码分发算法的不足,本文提出了一个以Seluge为安全框架,结合了异或网络编码的安全在线代码分发算法XSeluge。基站首先对待分发的程序映像进行分页、分组以及用于验证的散列值计算和安置,然后通过一个数字签名发起真正的数据传输。为了最大化每次能被成功解码的数据分组的个数,XSeluge引入了一个邻居节点表来确定最优编码方案。节点接收到数据分组后解码,通过简单的散列计算和比较进行即时的数据分组验证。为了防止恶意节点,故意地反复请求数据分组或多次传送伪造的数据分组,XSeluge在扩充原邻居节点表结构的基础上引入了计数器机制。实验结果显示,XSeluge具有Seluge相似的安全性能,在减少数据分组的传输方面有更好的性能。

According to the drawbacks of the existing secure online code dissemination, a secure online code dissemination algorithm, called XSeluge, was proposed. XSeluge bases on XOR network code and employs the secure framework of Seluge. In XSeluge, the base station firstly divides the program image into a series of pages which are further divided into the packets with fixed-size and computes the hash value of each packet and places it in the proper position. Next, the base station begins the code dissemination with a digital signature. To maximize the number of packets which can be encoded successfully in a time slot, the node chooses the optimal code scheme by the neighbor node table introduced in this paper. Upon receiving the data packet, the node decodes and authenticates it by computing and comparing its hash value. To defense against the attacker where vicious nodes request continuously a data packet from some nodes and send continuously some forged data packet to some nodes, XSeluge expands the structure of original neighbor node table. Based on the new neighbor node table, a receiving counter and sending counter are introduced. The experiment results show XSeluge has similar secure performance with Seluge. Furthermore, XSeluge can reduce total the transmitted data packet during the code dissemination.