Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2012, Vol. 38 ›› Issue (22): 88-91. doi: 10.3969/j.issn.1000-3428.2012.22.021

• Networks and Communications • Previous Articles     Next Articles

Flow-based Cross-layer Anomaly Detection Method in Wireless Mesh Networks

NIU Ling 1,2, GUO Yuan-bo 1, LIU Wei 1   

  1. (1. Institute of Electronic Technology, PLA Information Engineering University, Zhengzhou 450004, China; 2. PLA 63780 Unit, Sanya 572400, China)
  • Received:2012-01-05 Revised:2012-03-17 Online:2012-11-20 Published:2012-11-17

基于流量的无线Mesh网跨层异常检测方法

牛 玲 1,2,郭渊博 1,刘 伟 1   

  1. (1. 解放军信息工程大学电子技术学院,郑州 450004;2. 解放军63780部队,海南 三亚 572400)
  • 作者简介:牛 玲(1985-),女,硕士研究生,主研方向:无线网络安全;郭渊博,副教授、博士;刘 伟,副教授
  • 基金资助:
    河南省科技创新杰出青年计划基金资助项目(104100510025)

Abstract: Due to the large data forwarding, open and vulnerable in Wireless Mesh Networks(WMN), this paper provides an method of flow anomaly detection based on cross-layer data collecting. It calculates the predicted and measured values of the error window after smoothing the center of mass, and gets the deviation of the error which is estimated value, and thus quickly identifies various attacks. Analysis result shows that the proposed method can decrease memory expense, and has less error.

Key words: Wireless Mesh Networks(WMN), flow, cross-layer, anomaly detection, error windows, centroid

摘要: 根据无线Mesh网(WMN)中路由器数据转发量大、工作环境开放且易受攻击的特点,提出一种基于流量的WMN跨层异常检测方法。通过从多层获取的相关判据,结合时间序列对未来流量进行预测,计算预测值与实测值平滑后的误差窗口质心,得到估计误差的偏离程度值,从而对各种攻击进行快速判断。分析结果表明,该方法可减少存储开销,误判率较小。

关键词: 无线Mesh网, 流量, 跨层, 异常检测, 误差窗口, 质心

CLC Number: