Internet of things intrusion detection method based on finite state automaton and detection system

Abstract

The invention relates to an Internet of things intrusion detection method based on a finite state automaton and a detection system. A general protocol group of an Internet of things terminal is modeled through adoption of a finite state automaton principle, moreover, real-time monitoring and modeling are carried out for actions performed by the Internet of things terminal in interaction, and the actions are matched with normal interaction behaviors predicted by the finite state automaton, so abnormal attack behaviors are judged. According to the method and the system, a complex Internet of things system can be expressed by a labeled transition system, so a demand of IDSs (Intrusion Detection Systems) for a storage space is reduced to a great extent. Moreover, the complexity of a comparison algorithm is decided according to the depth of a Glued-IOLTS (labeled transition system) graph of a corresponding Internet of things device operation protocol, so the Internet of things intrusion detection method based on the finite state automaton can be applied to an Internet of things system. The method and the device are characterized by low mass, few occupied resources and high performing efficiency, are convenient for use and are relatively low in investment cost.

Description

technical field [0001] The invention belongs to the technical field of mobile communication network security of the Internet of Things, and in particular relates to an intrusion detection method of the Internet of Things based on a finite automaton. Background technique [0002] The Internet of Everything has become the main trend of future network development, and the Internet of Things has become the main direction of future 5G network development because it can greatly expand the network boundary of the Internet. Research and investment on the Internet of Things has gradually become the consensus of current high-tech companies. However, on the one hand, due to the low performance of most IoT terminal devices and insufficient single-point computing capabilities; the physical distribution of terminal devices is relatively wide, and they are easy to be captured by opponents; the network topology is flexible and easy to launch attacks from within the network. The security pr...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problems in the prior art that the performance of the IoT terminal equipment is low and the single-point computing capability cannot be used due to the inability to use complex cryptographic algorithms and complex authentication protocols, the pre...

Images