基于物联网技术的数字化校园网络安全防御系统设计

Design of the digital campus network security defense system based on the Internet of Things technology

针对校园网络设备易受木马病毒攻击,导致网络安全防御效果降低的问题。提出设计一个基于物联网技术的数字化校园网络安全防御系统。首先,基于可信物联网设备和i.MX6q开发板,搭建基础可信物联网设备原型系统;然后在原型系统的基础上搭建一个基于TrustZone的可信物联网设备系统,通过TrustZone的安全和可信混合启动技术保证系统启动阶段的完整性。实验结果表明,设计的原型系统功能完善,具备可行性。且Flash Bootloader的安全启动模块运行时间占Bootloader启动时间的比例为0.89%,OP-TEE OS的可信启动模块运行时间占OP-TEE OS启动时间的比例为37.79%,对比于OP-TEE OS的可信启动模块,Flash Bootloader的安全启动模块对系统产生的性能影响较小。进一步验证提出的基于安全和可信混合启动技术可有效保证系统的完整性,从而增强系统安全性。

The campus network equipment is vulnerable to Trojan virus attack,resulting in the reduction of network security defense effect.Proposed to design a digital campus network security defense system based on the Internet of Things technology.First,build the basic IoT device prototype system based on the reliable IoT device and i.MX 6 q development board;then build a TrustZone system based on the prototype system to guarantee the integrity of the system startup stage through the mixture of security and trusted startup technology of TrustZone.The experimental results show that the designed prototype system has perfect function and feasibility.In addition,the running time of the safe start module of Flash Bootloader accounts for 0.89%of Bootloader,and the running time of the trusted start module of OP-TEE OS is 37.79%.Compared with the trusted start module of OP-TEE OS,the safe start module of Flash Bootloader has little impact on the performance of the system.Further verification of the proposed hybrid based security and trusted startup technology can effectively ensure the integrity of the system,thus enhancing system security.