【摘要】：現(xiàn)階段用戶與用戶、終端與大型數(shù)據(jù)中心之間通信量越來越大，傳統(tǒng)網(wǎng)絡(luò)架構(gòu)很難滿足網(wǎng)絡(luò)通信效率和安全的高標(biāo)準(zhǔn)要求。基于傳統(tǒng)架構(gòu)的無線傳感器網(wǎng)絡(luò)（WirelessSensor Networks,WSN）同樣面臨兩方面問題，一方面現(xiàn)有WSN只能部署單一路由協(xié)議，不能根據(jù)網(wǎng)絡(luò)狀況靈活改變路由策略；另一方面隨著針對WSN的入侵方式越來越多樣化，基于傳統(tǒng)架構(gòu)的WSN入侵檢測方式較為單一，檢測效果較差。 為了解決傳統(tǒng)網(wǎng)絡(luò)架構(gòu)對WSN路由傳輸及安全限制的問題，本文引入了一種新型網(wǎng)絡(luò)架構(gòu)---軟件定義網(wǎng)絡(luò)（Software Defined Network, SDN），實現(xiàn)網(wǎng)絡(luò)傳輸與邏輯控制相分離，分布式協(xié)同計算和集中式管理控制相結(jié)合，有效提高網(wǎng)絡(luò)路由效率，降低節(jié)點能耗，提高入侵檢測準(zhǔn)確度，降低誤警率。 論文所做工作如下： 1、全面總結(jié)分析了基于傳統(tǒng)網(wǎng)絡(luò)架構(gòu)的無線傳感器網(wǎng)絡(luò)路由協(xié)議，分析了現(xiàn)有無線傳感器路由協(xié)議的優(yōu)缺點，指出了其在傳統(tǒng)架構(gòu)下面臨的低效率與高能耗問題。 2、將基于OpenFlow的SDN架構(gòu)引入無線傳感器網(wǎng)絡(luò)中，提出了新型的WSN架構(gòu)，采用混合型路由機(jī)制，使無線傳感器網(wǎng)絡(luò)具備靈活的可編程擴(kuò)展能力。通過與傳統(tǒng)路由算法仿真對比分析，結(jié)果表明新型架構(gòu)下無線傳感器網(wǎng)絡(luò)具有高效率、低能耗的優(yōu)點。 3、總結(jié)分析了傳統(tǒng)網(wǎng)絡(luò)架構(gòu)下的WSN入侵檢測方案，指出了其缺陷，如受節(jié)點能量限制只能部署輕量級算法，檢測機(jī)制單一，無法實現(xiàn)分布式與集中檢測相結(jié)合，，響應(yīng)機(jī)制不夠靈活等。本文提出了一種基于新型架構(gòu)的漏洞掃描與入侵檢測相結(jié)合的方案，通過對比分析驗證了新型架構(gòu)下入侵檢測模型的優(yōu)勢。
[Abstract]:At present, the communication between users and users, between terminals and large data centers is increasing, and the traditional network architecture is difficult to meet the high standards of network communication efficiency and security. Wireless sensor networks (WirelessSensor Networks,WSN) based on traditional architecture also face two problems. On the one hand, the existing WSN can only deploy a single routing protocol, and can not flexibly change routing policies according to the network conditions. On the other hand, with the diversification of intrusion modes for WSN, the traditional WSN intrusion detection method based on the traditional architecture is relatively simple, and the detection effect is poor. In order to solve the problem that traditional network architecture restricts WSN routing transmission and security, a new network architecture, software defined network (Software Defined Network, SDN), is introduced to separate network transmission from logical control. The combination of distributed cooperative computing and centralized management and control can effectively improve network routing efficiency, reduce node energy consumption, improve intrusion detection accuracy and reduce false alarm rate. The work of this paper is as follows: 1. The routing protocols of wireless sensor networks based on traditional network architecture are summarized and analyzed, and the advantages and disadvantages of existing wireless sensor routing protocols are analyzed. The problems of low efficiency and high energy consumption in traditional architecture are pointed out. Secondly, the SDN architecture based on OpenFlow is introduced into wireless sensor networks, and a new type of WSN architecture is proposed, which adopts hybrid routing mechanism. The wireless sensor network has flexible programmable expansibility. Compared with the traditional routing algorithm, the simulation results show that the wireless sensor network has the advantages of high efficiency and low energy consumption. 3. The WSN intrusion detection scheme under the traditional network architecture is summarized and analyzed. It is pointed out that, for example, limited by node energy, only lightweight algorithm can be deployed, the detection mechanism is single, the combination of distributed detection and centralized detection can not be realized, and the response mechanism is not flexible enough. In this paper, a new architecture based vulnerability scanning and intrusion detection scheme is proposed, and the advantages of the intrusion detection model under the new architecture are verified by comparison and analysis.
【學(xué)位授予單位】：河南大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前4條

1 周燁;李勇;蘇厲;金德鵬;曾烈光;;基于虛擬化的網(wǎng)絡(luò)創(chuàng)新實驗環(huán)境研究[J];電子學(xué)報;2012年11期

2 唐勇;周明天;張欣;;無線傳感器網(wǎng)絡(luò)路由協(xié)議研究進(jìn)展[J];軟件學(xué)報;2006年03期

3 韓志杰;黃劉生;王汝傳;孫力娟;盛明;;距離感知基于CAN的云計算網(wǎng)絡(luò)路由機(jī)制[J];通信學(xué)報;2011年07期

4 郭春梅;張如輝;畢學(xué)堯;;SDN網(wǎng)絡(luò)技術(shù)及其安全性研究[J];信息網(wǎng)絡(luò)安全;2012年08期

本文編號：2289402