抗多种攻击的网络编码安全方案

Network coding security scheme against multiple attacks

为解决目前网络编码安全方案研究目标不全面,安全性不高等问题,文章提出一种可以同时抵抗多种攻击方式的网络编码安全方案。本方案共有两个阶段分别应对窃听攻击和污染攻击。第一阶段首先选取部分信源消息生成预编码系数矩阵,并通过AES加密系统对其加密。然后用预编码矩阵对剩余的消息线性组合,使本方案可以抵抗网络窃听攻击。第二阶段给第一阶段处理后的消息生成签名,同时引入代标识符以及时间戳两个参数,来抵御无线网络中的代间污染攻击和代内污染攻击以及网络中的重放攻击。结果表明,本方案不仅能抵抗多种攻击,且编码复杂度较低,更加贴合实际应用。

In order to solve the problem that the research target of network coding security scheme is not comprehensive and the security is not high,this paper proposes a network coding security scheme which can resist multiple attack modes at the same time.The scheme has two phases,one for eavesdropping attacks and the other for contamination attacks.In the first stage,some source messages are selected to generate a precoding coefficient matrix and encrypted by AES encryption system.Then the precoded matrix is used to combine the rest of the messages linearly to make the scheme resistant to network eavesdropping attacks.In the second stage,signatures are generated for the messages processed in the first stage,and two parameters,generation identifier and time stamp,are introduced to resist inter-generation pollution attacks,intra-generation pollution attacks and replay attacks in the wireless network.The results show that this scheme can not only resist various attacks,but also has low coding complexity which is more suitable for practical application.