Wireless Mesh network intrusion detection system and detection method thereof

Abstract

The invention discloses a wireless Mesh network intrusion detection system and a detection method thereof in the technical field of network safety. The system comprises a data acquisition module, a detection recording module, a node dummy management module, a characteristic detection module and a response module. The detection method comprises the following steps of: forming a finite-state machine according to a routing protocol of a wireless Mesh network; deploying the intrusion detection system and determining a node which performs intrusion detection; starting state machine-based intrusiondetection; and establishing an anomaly-misuse detection mapping table to realize the intrusion detection. A routing protocol state machine can be adequately applied to the intrusion detection by establishing a node dummy so as to provide a detection basis for the detection of a detection node; the problem of inaccurate intrusion detection in the wireless Mesh network is solved by adopting an intrusion detection system deployment strategy; and the resource consumption of the network by the overall intrusion detection can be reduced by starting the timing selection of the detection system.

Description

technical field [0001] The present invention relates to a device and method in the technical field of network security, in particular to a wireless Mesh network intrusion detection system and a detection method thereof. Background technique [0002] Wireless Mesh Network (WMN) is a dynamic self-organizing network. Nodes in the network automatically establish and maintain connections with other nodes. These features bring many features to WMN networks, such as lower upfront cost, robustness and reliable service coverage. However, due to the characteristics of open wireless channels, cooperative routing algorithms, and lack of centralized monitoring, wireless Mesh networks have a sharp increase in the risk and opportunity of network intrusion. Designing security measures to find and eliminate intruders is the field of wireless Mesh network security. a very important and urgent issue. However, it is not realistic to completely prevent the network from being attacked, so the ...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the above-mentioned deficiencies in the prior art, the present invention provides a wireless Mesh network intrusion detection system and its detection method. By establishing node dummies, the routing protocol state machine can be properly used in intrusion detection, and detection is provided for detection nodes. Basis: By adopting the deployment strategy of the intrusion detection system, the problem of inaccurate intrusion detection in the wireless Mesh network is solved; by selecting the timing of opening the detection system, the resource consumption of the overall intrusion detection on the network can be reduced

Images