天地网络安全保障技术研究

doi:10.11959/j.issn.2096-8930.20200102

Abstract

Abstract:

The characteristics of space-ground network was combed.Against security threats in space-ground network,the security risks faced by measurement control,operation control,terminal access,wireless transmission,transmission,business information system,maintenance management were analyzed.Further,by dividing space-ground network security into four layers:foundation layer,access layer,network layer and application layer,a security architecture to protect space-ground network was proposed.An implement mechanism (including unifi ed security management and security situation aware,entity authentication and access protection,interconnection control,cipher on-demand service,dynamic reconstruction of security service ) was designed to guarantee the security of space-ground network.

Key words: space-ground network security guarantee, security situation aware, entity authentication and access protection, interconnection control, cipher on-demand service, dynamic reconstruction of security service

CLC Number:

TN929

Fenghua LI, Linjie ZHANG, Yueming LU, Kui GENG, Yunchuan GUO. Research on Space-Ground Network Security Guarantee Technology[J]. Space-Integrated-Ground Information Networks, 2020, 1(1): 17-25.

Figures/Tables 5

References 23

[23]	YI Z , SUN M M , DU X H . A cryptography resources scheduling algorithm for space-based access points based on service mapping and blocks scheduling[J]. Journal of Information Security Research, 2019,5(9): 805-811.
[24]	许英鑫 . 云密码资源池调度关键技术研究[D]. 郑州：战略支援部队信息工程大学, 2019.
	XU Y X . Research on key technique of cloud cryptographic resource pool scheduling[D]. Zhengzhou:Information Engineering University, 2019.
[25]	王泽武, 孙磊, 郭松辉 ,等. 密码云中基于熵权评价的虚拟密码机调度方法[J]. 计算机应用, 2018,38(5): 1353-1359.
[1]	XUE K , MENG W , LI S ,et al. A secure and efficient access and handover authentication protocol for internet of things in space information networks[J]. IEEE Internet of Things Journal, 2019: 1-1.
[2]	LIU Y N , LV S Z , XIE M ,et al. Dynamic anonymous identity authentication (DAIA) scheme for VANET[J]. International Journal of Communication Systems, 2019,32(5):e3892.
[3]	YOON E J , YOO K Y , HONG J W ,et al. An efficient and secure anonymous authentication scheme for mobile satellite communication systems[J]. EURASIP Journal on Wireless Communications and Networking, 2011(1):86.
[4]	朱辉, 武衡, 赵海强 ,等. 适用于双层卫星网络的星间组网认证方案[J]. 通信学报, 2019,40(3): 1-9.
	ZHU H , WU H , ZHAO H Q ,et al. Efficient authentication scheme for double-layer satellite network[J]. Journal on Communications, 2019,40(3): 1-9.
[5]	张子剑, 周琪, 张川 ,等. 新的低轨星座组网认证与群组密钥协商协议[J]. 通信学报, 2018,39(6): 150-158.
	ZHANG Z J , ZHOU Q , ZHANG C ,et al. New low-earth orbit satellites authentication and group key agreement protocol[J]. Journal on Communications, 2018,39(6): 150-158.
[6]	薛开平, 周焕城, 孟薇 ,等. 天地一体化网络无缝切换和跨域漫游场景下的安全认证增强方案[J]. 通信学报, 2019,40(6):138147.
	XUE K P , ZHOU H C , MENG W ,et al. Secure authentication enhancement scheme for seamless handover and roaming in space information network[J]. Journal on Communications, 2019,40(6): 138-147.
[7]	BASS T , GRUBER D . A glimpse into the future of ID[J]. login::the magazine of USENIX＆SAGE, 1999,24(4): 40-45.
[8]	SIATERLIS C , MAGLARIS V . One step ahead to multisensor data fusion for DDoS detection[J]. Journal of Computer Security, 200513: 779-806.
[9]	LU J , YANG X , ZHANG G . Support vector machine based multi source multi attribute information integration for situation assessment[J]. Expert Systems with Applications, 2008,34(2): 1333-1340.
[10]	POOLSAPPASIT N , DEWRI R , RAY I . Dynamic security risk management using bayesian attack graphs[J]. IEEE Transactions on Dependable and Secure Computing, 2012,9(1): 61-74.
[11]	HU G Y , ZHOU Z J , ZHANG B C ,et al. A method for predicting the network security situation based on hidden BRB modeland revised CMA-ES algorithm[J]. Applied Soft Computing, 2016,48: 404-418.
[12]	陈秀真, 郑庆华, 管晓宏 ,等. 层次化网络安全威胁态势量化评估方法[J]. 软件学报, 2006,17(4): 885-897.
	CHEN X Z , ZHENG Q H , GUAN X H ,et al. Quantitative hierarchical threat evaluation model for network security[J]. Journal of Software, 2006,17(4): 885-897.
[13]	张勇, 谭小彬, 崔孝林 ,等. 基于 Markov 博弈模型的网络安全态势感知方法[J]. 软件学报, 2011,22(3): 495-508.
	ZHANG Y , TAN X T , CUI X L ,et al. Network security situation awareness approach based on Markov game model[J]. Journal of Software, 2011,22(3): 495-508.
[14]	HU J , TIAN M , WANG Y . Risk assessment and comparative analysis for technical standards alliance based on fuzzy ahp method and bp neural network method[C]// 2016 Portland International Conference on Management of Engineering and Technology,Honolulu, 2016 597-605.
[15]	MELEK O , REFIK M . Denial of service prevention in satellite networks[C]// IEEE International Conference on Communications, 2004: 4387-4391.
[16]	MA T , LEE Y H , MA M D . Protecting satellite systems from disassociation DoS attacks[J]. Wireless Personal Communications, 2013,69(2): 623-638.
[17]	MUHAMMAD U , MARWA Q . Mitigating distributed denial of service attacks in satellite networks[J]. Transactions on Emerging Telecommunications Technologies, 2020,31(6).
[18]	关汉男 . 基于LEO的空间网络安全体系及关键技术研究[D]. 上海：上海交通大学, 2014.
	GUAN H N . Research on key security technologies in LEO-based space network[D]. Shanghai:Shanghai Jiao Tong University, 2014.
[19]	LI G , ZHOU H , FENG B ,et al. Horizontal-based orchestration for multi-domain SFC in SDN/NFV-enabled satellite/terrestrial networks[J]. China Communications, 2018,15(5): 77-91.
[20]	FENG B , LI G , LI G ,et al. Effcient mappings of service function chains at terrestrial-satellite hybrid cloud networks[C]// 2018 IEEE Global Communications Conference (GLOBECOM). IEEE, 2018: 1-6.
[21]	开彩红, 肖瑶, 方青 . 基于人工蜂群算法的中继卫星任务调度研究[J]. 电子与信息学报, 2015,37(10): 2466-2474.
	KAI C H , XIAO Y , FANG Q . Relay satellite scheduling based on artificial bee colony algorithm[J]. Journal of Electronics ＆Information Technology, 2015,37(10): 2466-2474.
[22]	潘成胜, 梁芷铭, 石怀峰 ,等. 面向并发业务的卫星网络服务功能链编排优化算法[J]. 计算机工程, 2020
	PAN C S , LIANG Z M , SHI H F ,et al. Concurrent spatial information network service function chain quick scheduling method[J]. Computer Engineering, 2020
[25]	WANG Z W , SUN L , GUO S H ,et al. Scheduling method of virtual cipher machine based on entropy weight evaluation in cryptography cloud[J]. Journal of Computer Applications, 2018,38(5): 1353-1359.
[23]	易卓, 孙慕明, 杜学绘 . 基于服务映射与分块调度的天基接入点密码资源调度算法[J]. 信息安全研究, 2019,5(9): 805-811.

Metrics

Recommended 0

No Suggested Reading articles found!

Research on Space-Ground Network Security Guarantee Technology

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 23

Related Articles 8

Metrics

Recommended 0

[1]	Zehao LI, Jianpeng MA, Shun ZHANG, Xiao WEI, Jing ZHANG. Low Orbit Satellite Internet of Things Transmission Technology Based on LoRa [J]. Space-Integrated-Ground Information Networks, 2022, 3(4): 2-11.
[2]	Ning HUI, Qian SUN, Yuanyuan WANG, Zongshuai ZHANG, Lin TIAN, Jing ZHANG, Xiao WEI. Review of Slice Resource Management Technology in Space-Integrated-Ground Access Network [J]. Space-Integrated-Ground Information Networks, 2022, 3(4): 55-64.
[3]	Mi LI, Qiang CHEN, Cheng ZENG, Xue WANG, Yisi WANG, Xiangfei CHEN. Effect of Optical Signal Beam Shift on the Performance of Satellite Chaos Laser Safety Communication System under Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2021, 2(2): 53-61.
[4]	Kangning LI, Xu FENG, Jianwen GAO, Jing Ma. Research on Performance of Fiber-Based Multiple Apertures Receiver System with PPM Modulation [J]. Space-Integrated-Ground Information Networks, 2021, 2(2): 62-68.
[5]	Gengxin ZHANG, Xiaojin DING, Zhicheng QU. Research on Space-Based Integrated Internet of Things Architecture and Interference Analysis [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 22-33.
[6]	Dan YANG, Jiang LIU, Ran ZHANG, Fangqi LIU, Man OUYANG, Tao HUANG, Yunjie LIU. SDN-Based Satellite Networks:Progress, Opportunities and Challenges [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 34-41.
[7]	Chengsheng PAN, Yufu WANG, Li YANG. Traffic Prediction of Space-Integrated-Ground Information Network Based on Improved LSTM Algorithm [J]. Space-Integrated-Ground Information Networks, 2020, 1(2): 57-65.
[8]	Wei WU. Survey on the Development of Space-Integrated-Ground Information Network [J]. Space-Integrated-Ground Information Networks, 2020, 1(1): 1-16.