Method and system for processing data link layer flow

Abstract

The invention provides a method and system for processing the data link layer flow. The method for processing data link layer flow comprises the steps that optimal scheduling is carried out on data messages in the mode that a plurality of virtual network interfaces are formed in a network card, and configuration parameters which correspond to the virtual network interfaces are set on the network card, each data message is distributed to the corresponding virtual network interface, and the data messages are transmitted to an upper-layer protocol stack in a transparent mode. Therefore, the flow of each virtual link has different characteristics, original flow characteristics can be covered up, different link transmission parameters such as MAC addresses, the sending power, the sending rate and priority queues are configured, an attacker cannot associate a plurality of virtual links, and cannot tell the difference between the virtual links and real links, and the purpose of effectively resisting flow analysis is achieved.

Description

technical field [0001] The present invention relates to the technical field of information processing, in particular to a data link layer traffic processing method and system. Background technique [0002] Wireless local area networks are widely deployed in residences, public hot spots, enterprises and campus environments to provide network access services for computers and mobile terminals. However, due to the openness and sharing of wireless links, attackers can more easily intercept specific user traffic through a variety of eavesdropping software, and speculate on user behavior characteristics and private information through traffic analysis. In addition, even if user information has been protected by existing common encryption and authentication methods (such as WEP and WPA / WPA), the leakage of private information is still unavoidable. [0003] Attacks against traffic analysis generally use traffic padding and traffic morphing. Traffic stuffing imposes a significant n...

AI Technical Summary

Problems solved by technology

The identifier-free mechanism can protect the content of the message from being stolen to a large extent and reduce the possibility of user identification. However, since the traffic characteristics of the message have not been changed, such as the distribution of message length, the The time interval of the text, etc., so the user's traffic information may still be used to associate users and leak important private information

At the same time, due to the complexity of the encryption mechanism and key management, it will cause performance degradation

The pseudonym mechanism (Pseudonym) modifies the MAC address in different working hours or idle conditions, but because the modification frequency of the MAC address in the pseudonym mechanism is not high enough, the correlation between traffic and the received signal strength of the message can change the pseudonym of different MAC addresses. associate

The frequency hopping communication method can increase the security of the traffic by dividing the traffic into different frequencies, but also because the operation granularity is coarse, the traffic characteristics on a single frequency may have leaked more clues and private information for correlation

Although the physical layer defense method can prevent attackers from monitoring the channel to a certain extent, it also affects the normal communication process and reduces network performance.

Images