拒绝服务攻击下基于分布式网络的安全状态估计

Security State Estimation Based on Distributed Network Under Denial of Service Attack

信息物理系统是在环境感知的基础上,融合计算、通信与控制功能的网络化物理设备,通过计算过程和物理进程相互影响的反馈循环,不断完成现实世界和虚拟世界动态的交互与协作。目前信息物理系统研究领域的网络攻击大体上分为3种,其中拒绝服务攻击利用网络传输协议的弱点,大量消耗系统资源,严重威胁着网络安全。基于分布式网络系统,针对不可靠无线传输信道存在的固有量测数据自然丢失和恶意干扰攻击问题,结合卡尔曼滤波与多传感器融合算法,提出一种基于最优状态估计与恶意攻击检测结合的异常检测模型。最后,通过MATLAB进行数值仿真,验证了所提出融合结构和检测模型的有效性。

Cyber-physical system is a networked physical device that integrates computing,communication and control functions on the basis of environment perception.Through the feedback loop of mutual influence of computing process and physical process,the dynamic interaction and cooperation between the real world and the virtual world are constantly completed.At present,there are three kinds of network attacks in the field of Cyber-physical system research.Denial of service attacks exploit the weakness of network transmission protocol,consume a lot of system resources,and seriously threaten network security.Based on distributed network system,an anomaly detection model based on optimal state estimation and malicious attack detection is proposed by combining Kalman filter and multi-sensor fusion algorithm to solve the problems of natural measurement data loss and malicious interference attacks in unreliable wireless transmission channels.Finally,the effectiveness of the proposed fusion structure and detection model is verified by numerical simulation with MATLAB.