物联网学报 ›› 2023, Vol. 7 ›› Issue (2): 88-97.doi: 10.11959/j.issn.2096-3750.2023.00334

• 理论与技术 • 上一篇    下一篇

面向工业无线网络的时间同步攻击检测

张思超1,2,3,4, 梁炜1,2,3, 苑旭东1,2,3, 张吟龙1,2,3, 郑萌1,2,3   

  1. 1 中国科学院沈阳自动化研究所机器人学国家重点实验室，辽宁 沈阳 110016
    2 中国科学院网络化控制系统重点实验室，辽宁 沈阳 110016
    3 中国科学院机器人与智能制造创新研究院，辽宁 沈阳 110169
    4 中国科学院大学，北京 100049
  • 修回日期:2023-03-11 出版日期:2023-06-30 发布日期:2023-06-01
  • 作者简介:张思超（1988- ），男，中国科学院沈阳自动化研究所副研究员，主要研究方向为工业无线网络、无线网络安全等
    梁炜（1974- ），女，博士，中国科学院沈阳自动化研究所研究员，主要研究方向为工业无线网络、网络信息安全等
    苑旭东（1980- ），男，博士，中国科学院沈阳自动化研究所副研究员，主要研究方向为工业TSN、工业无线网络
    张吟龙（1988- ），男，博士，中国科学院沈阳自动化研究所副研究员，主要研究方向为工业信息处理、多源信息融合等
    郑萌（1983- ），男，博士，中国科学院沈阳自动化研究所研究员，主要研究方向为工业物联网、网络化控制系统等
  • 基金资助:
    国家重点研发计划(2021YFB3301000);国家自然科学基金资助项目(62022088);国家自然科学基金资助项目(62273332)

Time synchronization attack detection for industrial wireless network

Sichao ZHANG1,2,3,4, Wei LIANG1,2,3, Xudong YUAN1,2,3, Yinlong ZHANG1,2,3, Meng ZHENG1,2,3   

  1. 1 State Key Laboratory of Robotics, Shenyang Institute of Automation, Chinese Academy of Sciences, Shenyang 110016, China
    2 Key Laboratory of Networked Control Systems, Chinese Academy of Sciences, Shenyang 110016, China
    3 Institutes for Robotics and Intelligent Manufacturing, Chinese Academy of Sciences, Shenyang 110169, China
    4 University of Chinese Academy of Sciences, Beijing 100049, China
  • Revised:2023-03-11 Online:2023-06-30 Published:2023-06-01
  • Supported by:
    The National Key Research and Development Program of China(2021YFB3301000);The National Natural Science Foundation of China(62022088);The National Natural Science Foundation of China(62273332)

在线阅读

10

PDF下载

352

摘要：

高精度的时间同步是保障工业无线网络（IWN, industrial wireless network）安全、可靠传输的基础。延迟攻击作为一类无法使用密码技术解决的时间同步攻击，严重威胁工业无线网络的安全运行。首先，在深入分析工业无线网络时间同步机制的基础上，构造了3种时间同步攻击模型，即单向全生命周期延迟攻击、双向全生命周期延迟攻击和单向非全生命周期延迟攻击，模型在目标节点未被捕获的前提下可实现较隐蔽的延迟攻击。其次，针对现有检测算法难以检测时间特征无明显变化的较隐蔽延迟攻击的问题，提出了一种基于贝叶斯模型的攻击检测算法，算法提取传输速率、传输时延、传输成功率及时间同步周期共4类代表性特征。此外，在贝叶斯特征信息矩阵中引入无线信道噪声模型，以保证在噪声干扰存在条件下的攻击检测和分类准确性。实验结果表明，所提算法在有噪声存在的情况下能够有效检测3种延迟攻击。

关键词: 工业无线网络, 时间同步攻击, 延迟攻击, 攻击检测, 贝叶斯模型

Abstract:

High-precision time synchronization is the basis for ensuring the secure and reliable transmission of industrial wireless network (IWN).Delay attacks, as a class of time synchronization attacks which cannot be solved by cryptographic techniques, seriously threaten the secure operation of IWN.Firstly, based on the in-depth analysis on the time synchronization mechanisms of IWN, three-time synchronization attack models were proposed, including the one-way full life cycle delay attack, two-way full life cycle delay attack, and one-way non-full-life cycle delay attack.Stealthier delay attacks could be realized by the attack models under the premise that target nodes were not captured.Secondly, considering the problem that existing detection algorithms are difficult to detect stealthier delay attacks without obvious changes in time features, an attack detection algorithm based on a Bayesian model was proposed that extracts four representative features, including transmission rate, transmission delay, transmission success rate and time synchronization interval.In addition, in order to ensure the accuracy of the attack detection and classification in the presence of noise interference, the noise model of wireless channel was introduced to the Bayesian feature information matrix.Experimental results show that the proposed algorithm can effectively detect three kinds of attacks in the presence of noise.

Key words: industrial wireless network, time synchronization attack, delay attack, attack detection, Bayesian model

中图分类号: 

No Suggested Reading articles found!