面向IoT安全的MITM攻击防御机制研究

Research on MITM Attack Defense Mechanism for IoT Security

隐蔽性强及攻击方式灵活的中间人(Man-in-the-Middle Attack,MITM)攻击是当前物联网(Internet of Things,IoT)智能家居安全面临的最大安全隐患之一.从攻击与防御两个角度提出了基于上下文感知融合的物联网设备配对模型和基于熵的异构物联设备指纹生成机制,以对抗型思维并行开展监测与防御方案研究,实现了对隐藏安全威胁的感知与过滤,通过相似度阈值分析测试与评估模型的建立完成了设备安全性验证,具有较好的效果与优势.

Man in the Middle Attack(MITM),which has strong concealment and flexible attack methods,is one of the biggest security risks faced by the current Internet of Things(IoT)smart home security.From the perspectives of attack and defense,a context aware fusion based IoT device pairing model and an entropy based heterogeneous IoT device fingerprint generation mechanism are proposed,and monitoring and defense solutions are studied in parallel using adversarial thinking,The perception and filtering of hidden security threats have been achieved,and the device security verification has been completed through similarity threshold analysis,testing,and evaluation model establishment,with good results and advantages.