摘要
为了保障路由的安全性和抗毁性,设计面向星间路由的安全机制和故障恢复机制成为维护低轨卫星网络可靠通信的关键。为了应对卫星网络可能面临的安全威胁,分析不同路由攻击行为对典型星间路由协议的影响,并设计差异化的协议包安全认证机制和链路故障恢复机制。此外,搭建基于虚拟化技术的卫星网络仿真平台,通过仿真多种路由攻击场景,验证所设计星间路由安全机制的有效性,并评估引入安全机制前后的CPU占用率、协议包处理时间等性能指标。实验结果表明,在有限的认证时间和路由开销下,该星间路由安全机制能够有效防范空间网络环境中的多种安全威胁,并减少由突发链路故障引起的通信时延,从而保障低轨卫星网络的安全可靠通信。
The design of secure mechanisms and failure recovery mechanisms for inter-satellite routing has become pivotal in maintaining dependable communication within the LEO satellite network.To address the potential security threats faced by satellite networks,the impact of different routing attack behaviors on a typical inter-satellite routing protocol was analyzed and differentiated packet security authentication mechanisms and link failure recovery mechanisms were designed.Additionally,a satellite network emulation platform based on virtualization technology was constructed,enabled the verification of the effectiveness of the designed inter-satellite routing security mechanisms through the emulation of various routing attack scenarios.Furthermore,performance metrics such as CPU utilization and packet processing time were also evaluated before and after the introduction of security mechanisms.Experimental results demonstrated that the proposed inter-satellite routing security mechanism effectively mitigated multiple security threats in the space network environment while reduced communication latency caused by sudden link failures,thereby ensured secure and reliable communication within the LEO satellite network.
作者
薛文浩
潘恬
卢诚承
杨帆
黄韬
刘韵洁
XUE Wenhao;PAN Tian;LU Chengcheng;YANG Fan;HUANG Tao;LIU Yunjie(State Key Laboratory of Networking and Switching Technology,BUPT,Beijing 100876,China;Purple Mountain Laboratories,Nanjing 211111,China)
出处
《天地一体化信息网络》
2023年第2期13-23,共11页
Space-Integrated-Ground Information Networks
基金
国家重点研发计划资助项目(No.2018YFB1800602,No.2019YFB1802600)。
关键词
低轨卫星网络
路由协议
路由安全攻击
链路故障恢复
安全攻击仿真
LEO satellite network
routing protocol
routing security attack
link failure recovery
security attack simulation