基于链路覆盖的无线Mesh网络入侵检测方法

Research on Intrusion Detection for WMN Based on Link-Coverage

针对传统入侵检测方法不适用于资源受限的无线Mesh网络(WMN)的问题,提出一种基于链路覆盖的分布式入侵检测(LCDID)方法.该方法将WMN中所有节点纳入到入侵检测中,节点根据自身内存阈值加载入侵检测系统功能模块,并采用协调优化机制优化节点对功能模块加载,每条通信链路可由多个节点覆盖检测.仿真实验结果表明,LCDID方法对不同规模的网络具有较好的适应性和可扩展性;与现有检测方法相比,该方法具有更高的内存利用率和入侵检测率.

In order to solve the problem that the traditional intrusion detection methods are not suitable for resource-limited wireless Mesh network（ WMN）,a link-coverage based distributed intrusion detection method（ LCDID） was presented. LCDID requires all nodes in WMN to participate in intrusion detection,each node loads detection modules by the memory threshold,and adopts the coordinated optimization mechanism to optimize the loading modules for nodes,each communication link can be detected by multiple monitoring nodes. Experiment shows that LCDID has good adaptability and expansibility to different scale networks,and it has higher memory utilization and detection rate comparing with existing methods.