首页> 外文学位 >Integrated security architecture for wireless mesh networks.
【24h】

Integrated security architecture for wireless mesh networks.

机译:无线网状网络的集成安全体系结构。

获取原文
获取原文并翻译 | 示例

摘要

Wireless Mesh Networks (WMNs) have revolutionized provisioning of economical and broadband wireless internet service to the whole community of users. The self-configurable and self-healing ability of WMNs has encouraged their rapid proliferation, as adding a mesh router (MR) is as simple as plugging and turning on. The plug-and-play architecture of WMN, however paves way to malicious intruders. An attacker can raise several security concerns, like rogue routers, selfishness, and denial-of-service attacks. Unfortunately, current thrust of research in WMNs, is primarily focused on developing multi-path routing protocols; and security is very much in its infancy.;Owing to the hierarchical architecture of WMNs, security issues are multi-dimensional. As mesh routers form the backbone of the network, it is critical to secure them from various attacks. In this dissertation we develop integrated security architecture to protect the mesh backbone. It is important to provide an end-to-end security for mesh clients and hence we design a novel authentication protocol for mutually authenticating mesh clients and mesh routers.;The aim of this dissertation is to explore various issues that affect the performance and security of WMNs. We first examine the threat of an active attack like Denial of service attack on MRs and design a cache based throttle mechanism to control it. Next, we develop a MAC identifier based trace table to determine the precise source of a DoS attacker. We then evaluate the vulnerability of WMNs to passive attacks, like selfishness and propose an adaptive mechanism to penalize selfish MRs that discretely drop other's packets. In order to handle route disruption attacks like malicious route discovery, we design an intelligent Intrusion Detection System. Through extensive simulations, we evaluate effectiveness of our proposed solutions in mitigating these attacks. Finally, we design a light weight authentication protocol for mesh clients using inexpensive hash operations that enables authentication of important control messages and also performs auto-refresh of authentication tokens.
机译:无线网状网络(WMN)彻底改变了向整个用户社区提供经济和宽带无线互联网服务的情况。 WMN的可自我配置和自我修复能力促进了它们的迅速发展,因为添加网状路由器(MR)就像插拔电源一样简单。 WMN的即插即用体系结构为恶意入侵者铺平了道路。攻击者可能会提出一些安全问题,例如流氓路由器,自私和拒绝服务攻击。不幸的是,当前WMNs的研究重点主要集中在开发多路径路由协议上。由于WMN的分层体系结构,安全性问题是多维的。由于网状路由器构成网络的骨干网,因此保护它们免受各种攻击至关重要。在本文中,我们开发了集成的安全架构来保护网状骨干网。为网状客户端提供端到端的安全非常重要,因此,我们设计了一种新颖的身份验证协议,用于相互认证网状客户端和网状路由器。本文的目的是探讨影响网状网络客户端性能和安全性的各种问题。 WMN。我们首先检查主动攻击的威胁,例如对MR的拒绝服务攻击,然后设计基于缓存的节流机制来控制它。接下来,我们开发一个基于MAC标识符的跟踪表,以确定DoS攻击者的确切来源。然后,我们评估WMN对被动攻击(如自私)的脆弱性,并提出一种自适应机制来惩罚离散丢弃其他用户数据包的自私MR。为了处理诸如恶意路由发现之类的路由中断攻击,我们设计了一个智能入侵检测系统。通过广泛的仿真,我们评估了所建议解决方案在缓解这些攻击方面的有效性。最后,我们使用廉价的哈希操作为网状客户端设计了一种轻量级的身份验证协议,该协议可对重要的控制消息进行身份验证,并执行身份验证令牌的自动刷新。

著录项

  • 作者

    Santhanam, Lakshmi.;

  • 作者单位

    University of Cincinnati.;

  • 授予单位 University of Cincinnati.;
  • 学科 Computer Science.
  • 学位 Ph.D.
  • 年度 2008
  • 页码 154 p.
  • 总页数 154
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类 自动化技术、计算机技术;
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号