A Method of Monitoring Router Selection Based on Mutual Information

Abstract

The present invention is a monitoring router selection method based on the amount of mutual information, which belongs to the technical field of communication networks; the method first obtains the bridge connection coefficient of each router, and secondly obtains the total amount of mutual information between each router and all adjacent routers of each router. , select the router with the largest amount of mutual information as the monitoring router in the network topology, and finally determine the supervision area of ​​each monitoring router; the topological position of the monitoring router selected in this invention has an important position in the network, which facilitates the exchange of monitoring information. The invention can ensure the accuracy of monitoring information and is not vulnerable to attacks; the invention avoids excessive consumption of routers caused by cluster-based intrusion monitoring system monitoring methods that ignore the importance differences of routers in the network and the interconnections between network routers. Compute resources and energy, reduce redundant information, avoid resource consumption, reduce system monitoring overhead, and improve network performance to a great extent.

Description

technical field [0001] The invention belongs to the technical field of communication networks, and in particular relates to a method for selecting a monitoring router based on mutual information. Background technique [0002] Wireless Mesh network is a new type of wireless network based on multi-hop interconnection. It is different from traditional wireless local area network and wireless multi-hop Ad Hoc network. It can be regarded as two kinds of networks; the nodes of wireless Mesh network have both The functions of routers and relays, nodes can be interconnected, similar to Ad Hoc networks, with self-organization, self-configuration and other characteristics, wireless Mesh network consists of a backbone network composed of Mesh routers and a peer-to-peer network composed of Mesh clients . The wireless backbone network is composed of wireless Mesh routers, which have only a small amount of mobility or no mobility, and can provide wireless backhaul functions; the routing ...

AI Technical Summary

Problems solved by technology

[0003] Although the use of wireless links provides great convenience, it also brings many security threats, which is of great significance to the research on wireless Mesh network security issues; as an active security protection technology, the intrusion detection system can target internal Real-time protection against attacks from external nodes and corresponding responses in a timely manner to reduce losses; the important task of intrusion monitoring is to monitor the status of network routers and observe whether the behavior of routers is normal. If each router in the network is used as an intrusion detection system If there are too few monitoring routers, the intrusion detection system may not be able to monitor all the routers in the network if there are too few monitoring routers. monitoring tasks

[0004] The current network monitoring router selection methods generally only consider the topological position of the router, and divide the routers with similar topological positions into a "cluster"; these methods ignore the importance difference of routers in the network and the interconnection between network routers, so It is possible to divide routers with frequent contacts and high communication frequencies into different "clusters", so that the cluster heads of their clusters will process a lot of the same or similar information, excessively consuming the computing resources and energy of routers, and at the same time It also increases the security monitoring overhead of the system, and they are likely to detect malicious node information at the same time, and at the same time send a report to notify the relevant nodes of the entire network, so the fluctuation of monitoring overhead is also large, which reduces network performance

Images