自组织网络中跨协议层安全体系结构

文章提出了跨协议层的自组织网络安全体系以及各项关键技术要点。由于跨协议层自组织网络的安全体系结构与传统的网络安全体系有所不同,它分为可重复的定制化安全引导、跨协议层的安全维护、安全检测与防御三个主要的系统。在系统初始阶段,通过安全引导系统把建立一个安全的自组织网络所需的预共享内容与机制等引导入整个网络,实现网络中点到点的安全链接,并使得网络在导入的安全机制或策略下进行安全可信的工作。当安全引导结束后,随即进行跨协议层安全维护阶段。安全维护阶段的维护信息被送往安全检测与防御系统,一旦检测出了异常,则安全检测与防御系统发出告警和采取防御措施或二次安全引导,从而实现整个网络的保护和自适应安全配置的调整。

A Secure Architecture of Cross Protocol Layers in an Ad Hoc Network Environment

This paper proposes a security architecture for cross protocol layers in an Ad Hoc network and related key technologies.Since it varies from the traditional network security architecture,it can be classified as three systems including customized security bootstrapping,security maintenance based on the cross protocol layers,a system of detection and prevention.In the initial phase,the pre-sharing contents and mechanism for establishing a secure Ad Hoc Network will be bootstrapped into whole network.A reliable linkage could be built from one endpoint to another and a trustable environment working under the established security mechanism or polices.After the bootstrap process completes,the whole network will go into security maintenance process on cross protocol layers.Then the maintenance information will be sent for detecting the preventing the anomaly events.The alarms and corresponding countermeasures will be taken to protect the whole network with possible second security bootstrap or adjusting security configurations.