针对6Lowpan网络中日益严峻的网络安全问题,提出了一种抗网络攻击的6Lowpan节点地址注册算法.该算法在RFC 6775的ARO字段内选取2 bits,分别对应SLLAO字段携带的4种注册地址部分,待注册节点向已发现的邻居路由发送携带了修改后的ARO和SLLAO字段的NS帧后,邻居路由根据自己的邻居缓存(NCE)内的条目对该NS帧进行NA回应;待注册节点收到该NA帧后,与自身的注册地址相比对并发送相应的NS帧,邻居路由接收后再次根据NCE条目进行NA帧回应;待注册节点收到邻居路由发送的确认性NA帧后,完成注册过程.理论分析表明,所提出的地址注册算法针对伪节点发送的NS/NA帧攻击都能够进行良好的防御,对比RFC 6775所提供的方式具有更好的抗网络攻击性.同时该算法将注册过程的128位注册地址缩短为48位/16位,在降低网络带宽和延时方面有良好的效果.%In view of the increasingly serious network security problem in 6Lowpan network,an 6Lowpan node address registration algo-rithm against network attack is proposed. Two bits in ARO of RFC 6775 are selected to respectively corresponding to the 4 registered ad-dresses,which are attached in SLLAO. The registering node sends NS with fixed ARO and SLLAO to its known neighbor router. And then the neighbor router responds to this NS and sends NA to the source depending on its own Neighbor Cache Entry ( NCE) . Moreover, registering node gets the NA and matches with its own registering address,and then responds to the router with NS. At the last time,router acknowledges this NS and sends NA again to node depending on NCE. The address registration is ended when the registering node gets this NA. The algorithm keeps working under pseudo-nodes' NS/NA attacking by theoretical analysis,and it has better anti-attack per-formance than counterpart in RFC 6775. At the same time,shortened 128 bits to 48/16 bits during registering process brings lower band-width and latency under this algorithm.
展开▼
