Active hiding method of router identity feature information

Abstract

The invention relates to an active hiding method of router identity characteristic information. Through a message parsing mechanism, arrived detection messages are parsed and legal detection messages and illegal detection messages are distinguished. Through a randomization pseudonym information scheduling mechanism, corresponding pseudonym information is scheduled according to an illegal message detection demand so that a hiding purpose is reached. Through dynamic perception learning, a fake identity information pool is generated so that an attacker identity which is responded and given by the router is highly similar with a node identity in a surrounding network environment and attacker identification difficulty is increased. When an identity characteristic needs to be hidden, the router adopts a Hash mapping mode to randomly select the identity characteristic to respond from the fake identity information pool according to an identity characteristic of an attacker. A consistent strategy is used so as to ensure that response contents which are given to the same attacker are consistent so that the attacker is deceived.

Description

technical field [0001] The invention relates to the field of computer network security, in particular to a method for actively hiding router identity feature information. Background technique [0002] At present, the network has become one of the infrastructures of the information society and plays an increasingly important role in people's daily life. In this context, network security, especially the security of the core network, is particularly important. Network attackers are the main threat to network security at present. Network attackers often use the relevant protocol vulnerabilities of routers to illegally detect the characteristic information of routers, and then use the characteristic information of routers to attack and control routers to achieve the purpose of attacking and destroying the entire network. . [0003] The existence of router characteristic information is to facilitate administrators to configure, manage and maintain routers. Network attackers use ...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies in the prior art, the present invention provides a method for actively hiding router identity feature information, starting from the perspective of improving network security capabilities and network protection capabilities, aiming at the problems existing in the router management plane, by randomizing pseudo-identity response generation algorithms Solve the problem of various identities leaked by the current routers due to the loopholes in the relevant protocols. When the illegal information detection message enters the router management plane, the identity hiding technology is used through mimicry, that is, the pseudo-identity response generation algorithm is randomized to generate a pseudo-identity The response message is sent to the peer to hide the identity of the attacker

Images