【摘要】：近些年來(lái),工業(yè)無(wú)線網(wǎng)絡(luò)已經(jīng)成為了在繼現(xiàn)場(chǎng)總線之后工業(yè)控制系統(tǒng)領(lǐng)域又一個(gè)研究的熱點(diǎn)問(wèn)題。工業(yè)無(wú)線技術(shù)具有泛在感知、低功耗、低成本、抗干擾、擴(kuò)展性強(qiáng)、靈活度高等諸多優(yōu)點(diǎn),因此擁有廣闊的應(yīng)用前景。其中工業(yè)無(wú)線網(wǎng)絡(luò)WIA-PA (Wireless Networks for Industrial Automation-Process Automation)技術(shù)是一項(xiàng)我國(guó)具有自主知識(shí)產(chǎn)權(quán)的工業(yè)無(wú)線網(wǎng)絡(luò)技術(shù)。它是在國(guó)家863重點(diǎn)課題的支持下,由中科院沈陽(yáng)自動(dòng)化研究所、西南大學(xué)、重慶郵電大學(xué)等10余家單位共同研究和開(kāi)發(fā)的。工業(yè)無(wú)線網(wǎng)絡(luò)的使用給工業(yè)生產(chǎn)帶來(lái)了極大的便利,然而工業(yè)無(wú)線網(wǎng)絡(luò)作為一種新興技術(shù),也面臨諸多挑戰(zhàn),其中安全問(wèn)題就是其中一個(gè)很重要的方面。WIA-PA作為一個(gè)開(kāi)放的網(wǎng)絡(luò),往往會(huì)面臨多種安全威脅,因此對(duì)工業(yè)無(wú)線網(wǎng)絡(luò)安全性進(jìn)行研究、確保網(wǎng)絡(luò)安全正常運(yùn)行具有重要的意義。 WIA-PA網(wǎng)絡(luò)采用星型(Star)和網(wǎng)狀(Mesh)相結(jié)合的兩層網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)。WIA-PA主要通過(guò)Mesh網(wǎng)絡(luò)進(jìn)行數(shù)據(jù)傳輸來(lái)完成通信過(guò)程。而對(duì)于Mesh網(wǎng)絡(luò)通信來(lái)說(shuō),路由技術(shù)是WIA-PA保證通信正常運(yùn)行的重要方面和關(guān)鍵技術(shù),而保證路由的安全也是影響網(wǎng)絡(luò)整體安全性的一個(gè)重要因素。目前針對(duì)WIA-PA路由算法還處于研究階段,沒(méi)有成熟的路由算法。而當(dāng)前比較成熟的Mesh網(wǎng)絡(luò)路由算法主要是無(wú)線自組織網(wǎng)絡(luò)Ad hoc的路由算法,如DSDV、 AODV、DSR等。針對(duì)Ad hoc路由協(xié)議的安全路由策略也有很多,然而這些路由協(xié)議不能完全滿足WIA-PA對(duì)安全的要求,因而必須結(jié)合WIA-PA網(wǎng)絡(luò)的具體特點(diǎn),設(shè)計(jì)出適合于WIA-PA網(wǎng)絡(luò)需求的安全路由算法。 本文針對(duì)提高網(wǎng)絡(luò)安全性,抵御網(wǎng)絡(luò)惡意節(jié)點(diǎn)的攻擊破壞這一難題,分析目前Ad hoc網(wǎng)絡(luò)路由協(xié)議的優(yōu)點(diǎn)與不足,并對(duì)現(xiàn)有的安全方案進(jìn)行比較,結(jié)合WIA-PA網(wǎng)絡(luò)的具體應(yīng)用環(huán)境與特點(diǎn),提出一種基于按需路由DSR的工業(yè)無(wú)線網(wǎng)絡(luò)WIA-PA安全多徑路由協(xié)議。該安全路由協(xié)議通過(guò)增加鄰居節(jié)點(diǎn)的信用值機(jī)制,實(shí)現(xiàn)了對(duì)鄰居節(jié)點(diǎn)的身份認(rèn)證及信用值管理,可以有效的防止惡意節(jié)點(diǎn)加入網(wǎng)絡(luò),解決了WIA-PA網(wǎng)絡(luò)中自私節(jié)點(diǎn)問(wèn)題；對(duì)路由消息進(jìn)行端到端的簽名與認(rèn)證,防止惡意節(jié)點(diǎn)對(duì)路由信息進(jìn)行偽造、篡改、黑洞以及重放等攻擊；為提高路由協(xié)議的抗毀性能,降低對(duì)網(wǎng)絡(luò)資源的消耗,增加多路徑路由機(jī)制,確定路徑的優(yōu)先級(jí),選擇合適的多路徑路由集,同時(shí)通過(guò)對(duì)多條路徑的靈活運(yùn)用,可以有效的減少路由再發(fā)現(xiàn)頻率。 最后通過(guò)NS2仿真平臺(tái)對(duì)本文提出的基于DSR的工業(yè)無(wú)線網(wǎng)絡(luò)WIA-PA安全多徑路由協(xié)議從分組成功投遞率、平均吞吐量、平均端到端時(shí)延、網(wǎng)絡(luò)開(kāi)銷(xiāo)方面和DSR協(xié)議進(jìn)行性能比較,并針對(duì)黑洞攻擊進(jìn)行了仿真比較。仿真結(jié)果表明,本文提出的基于DSR的WIA-PA安全路由協(xié)議算法能有效的抵御偽裝、篡改、重放、拒絕服務(wù)等多種路由攻擊,同時(shí)由于使用了多徑路由算法,在提高網(wǎng)絡(luò)的安全性、可靠性等方面取得了較好的效果。
[Abstract]:In recent years, industrial wireless network has become a hot issue in the field of industrial control system after field bus. Industrial wireless technology has many advantages, such as ubiquitous perception, low power consumption, low cost, anti-interference, strong scalability, high flexibility and so on. Therefore, industrial wireless network WIA-PA (industrial wireless network) (industrial wireless network) has a wide application prospect. Wireless Networks for Industrial Automation-Process Automation) technology is an industrial wireless network technology with independent intellectual property rights in China. It has been studied and developed by more than 10 units of Shenyang Automation Research Institute of the Chinese Academy of Sciences, Southwestern University, Chongqing University of Posts and Telecommunications and so on. The use of line network brings great convenience to industrial production. However, as a new technology, industrial wireless network is also faced with many challenges. The security problem is one of the most important aspects,.WIA-PA, as an open network, often faced with a variety of security threats. Therefore, the security of industrial wireless network is studied. To ensure the normal operation of network security is of great significance.
WIA-PA network uses the two layer network topology that combines Star and Mesh network topology.WIA-PA to carry out the communication process mainly through Mesh network. For Mesh network communication, routing technology is the important aspect and key technology of WIA-PA to ensure the normal operation of communication, and the security of routing is also the influence network. At present, the WIA-PA routing algorithm is still at the research stage, and there are no mature routing algorithms. But the current mature Mesh routing algorithms are mainly routing algorithms of Ad hoc in wireless self-organizing network, such as DSDV, AODV, DSR, etc., and there are many secure routing strategies for Ad hoc routing protocols, However, these routing protocols can not fully meet the requirements of WIA-PA for security, so it is necessary to design a secure routing algorithm suitable for the requirements of the WIA-PA network in combination with the specific features of the WIA-PA network.
In order to improve the network security and resist the attack and destruction of network malicious nodes, this paper analyzes the advantages and disadvantages of the current Ad hoc network routing protocol, compares the existing security schemes, and combines the specific application environment and characteristics of the WIA-PA network, and proposes an industrial wireless network WIA-PA security based on the on-demand routing DSR. Routing protocol. By increasing the credit value mechanism of neighbor nodes, this secure routing protocol realizes the identity authentication and credit value management of neighbor nodes. It can effectively prevent malicious nodes from joining the network and solve the selfish node problem in WIA-PA network. Routing information is forged, tampered, black hole and replay attacks. In order to improve the survivability of the routing protocol, reduce the consumption of the network resources, increase the multipath routing mechanism, determine the priority of the path, select the appropriate multipath routing set, and reduce the route rediscovery effectively through the flexible use of multiple paths. Rate.
Finally, the NS2 simulation platform is used to compare the performance of the WIA-PA secure multipath routing protocol based on the DSR based industrial wireless network from the packet successful delivery rate, average throughput, average end-to-end delay, network overhead and the performance of the DSR protocol. Simulation results are made for black hole attacks. The simulation results show the base of this paper. The WIA-PA security routing protocol algorithm in DSR can effectively resist various routing attacks such as camouflage, tamper, replay, denial of service and so on. At the same time, the multipath routing algorithm has been used to improve the security and reliability of the network.
【學(xué)位授予單位】：西南大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2013
【分類(lèi)號(hào)】：TN915.04

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 王建新,張亞男,王偉平,盧錫城;移動(dòng)自組網(wǎng)中基于聲譽(yù)機(jī)制的安全路由協(xié)議設(shè)計(jì)與分析[J];電子學(xué)報(bào);2005年04期

2 金瑜;古志民;顧進(jìn)廣;趙紅武;;一種對(duì)等網(wǎng)中基于相互信任的兩層信任模型[J];軟件學(xué)報(bào);2009年07期

3 季曉君;田暢;張毓森;;安全DSR路由協(xié)議分析與設(shè)計(jì)[J];通信學(xué)報(bào);2006年03期

4 覃振權(quán);李津生;洪佩琳;胡鵬;;一種Ad Hoc網(wǎng)絡(luò)中的安全多路徑DSR協(xié)議[J];小型微型計(jì)算機(jī)系統(tǒng);2007年03期

5 張遠(yuǎn),郭虹,劉洛琨;DSDV算法實(shí)現(xiàn)及其性能分析[J];移動(dòng)通信;2004年S2期

6 彭瑜;;無(wú)線HART協(xié)議——一種真正意義上的工業(yè)無(wú)線短程網(wǎng)協(xié)議的概述和比較[J];儀器儀表標(biāo)準(zhǔn)化與計(jì)量;2007年05期

7 梁煒;張曉玲;;第十四章 WIA-PA:用于過(guò)程自動(dòng)化的工業(yè)無(wú)線網(wǎng)絡(luò)系統(tǒng)結(jié)構(gòu)與通信規(guī)范[J];儀器儀表標(biāo)準(zhǔn)化與計(jì)量;2009年02期

8 朱祥彬;;第二十三章 WIA-PA網(wǎng)絡(luò)安全機(jī)制的研究[J];儀器儀表標(biāo)準(zhǔn)化與計(jì)量;2010年05期

9 曾鵬;于海斌;;工業(yè)無(wú)線網(wǎng)絡(luò)WIA標(biāo)準(zhǔn)體系與關(guān)鍵技術(shù)[J];自動(dòng)化博覽;2009年01期

10 王華;劉楓;楊頌華;;工業(yè)無(wú)線網(wǎng)絡(luò)WIA-PA網(wǎng)絡(luò)研究與設(shè)計(jì)[J];自動(dòng)化與儀表;2009年07期

相關(guān)博士學(xué)位論文 前1條

1 覃振權(quán);無(wú)線自組網(wǎng)路由和MAC關(guān)鍵技術(shù)的研究[D];中國(guó)科學(xué)技術(shù)大學(xué);2007年

相關(guān)碩士學(xué)位論文 前8條

1 何鴻;工業(yè)無(wú)線網(wǎng)絡(luò)簇間鏈路調(diào)度策略研究[D];西南大學(xué);2011年

2 杜小杰;工業(yè)無(wú)線網(wǎng)絡(luò)WIA-PA多徑路由協(xié)議研究[D];西南大學(xué);2011年

3 陳宗鋒;基于信任評(píng)估的工業(yè)無(wú)線網(wǎng)絡(luò)安全研究[D];西南大學(xué);2012年

4 王華;工業(yè)無(wú)線網(wǎng)絡(luò)節(jié)能路由算法研究[D];西南大學(xué);2010年

5 韓瑞;工業(yè)無(wú)線網(wǎng)絡(luò)密鑰分配策略研究[D];西南大學(xué);2010年

6 張丹;基于自適應(yīng)心跳協(xié)議的工業(yè)無(wú)線網(wǎng)絡(luò)簇首冗余機(jī)制研究[D];西南大學(xué);2010年

7 陳鵬;無(wú)線Ad Hoc網(wǎng)絡(luò)路由安全研究[D];北京郵電大學(xué);2010年

8 何柳;基于鏈路質(zhì)量度量的工業(yè)無(wú)線網(wǎng)絡(luò)路由策略研究[D];西南大學(xué);2012年

，

本文編號(hào)：2125214