Design of Satellite Internet Defense System Based on Mobile Target Defense

XU Ruirong

doi:10.11959/j.issn.2096-8930.2024043

您当前的位置：

首页 >

文章列表页 >

Design of Satellite Internet Defense System Based on Mobile Target Defense

Studies | 更新时间：2025-01-02

- Design of Satellite Internet Defense System Based on Mobile Target Defense
- Space-Integrated-Ground Information Networks Vol. 5, Issue 4, Pages: 106-112(2024)
- 作者机构：
  
  中国石化胜利油田电力分公司，山东东营 257087
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-8930.2024043
  CLC： TN927
- Received：21 October 2024，
  
  Revised：2024-11-17，
  
  Published：20 December 2024
- 稿件说明：
移动端阅览
徐瑞荣.基于移动目标防御的卫星互联网防御系统设计[J].天地一体化信息网络,2024,05(04):106-112.

XU Ruirong.Design of Satellite Internet Defense System Based on Mobile Target Defense[J].Space-Integrated-Ground Information Networks,2024,05(04):106-112.
徐瑞荣.基于移动目标防御的卫星互联网防御系统设计[J].天地一体化信息网络,2024,05(04):106-112. DOI： 10.11959/j.issn.2096-8930.2024043.

XU Ruirong.Design of Satellite Internet Defense System Based on Mobile Target Defense[J].Space-Integrated-Ground Information Networks,2024,05(04):106-112. DOI： 10.11959/j.issn.2096-8930.2024043.

摘要

卫星互联网在促进信息互联互通的同时，也引发了日益复杂的安全性问题。将作为主动防御手段的移动目标防御技术引入卫星互联网的安全防护中，通过将卫星互联网的IP地址、协议端口等端址信息进行伪随机变化，增强系统的抗截获攻击和拒绝服务攻击性能，从而实现主动防御。在此基础上，设计基于移动目标防御的卫星互联网原型系统，解决跳变同步、跳变传输等关键问题，验证原型系统的可行性和有效性。

Abstract

While satellite Internet promote information inter connectivity

they also raise increasingly complex security issues. This article introduced mobile target defense as proactive defense measure into the cyber protection of satellite Internet. By changing the IP address

protocol port information of satellite Internet pseudo-randomly

the system's resistance to interception attacks and denial of service attacks was enhanced

thereby achieving active defense. On this basis

a prototype system of satellite Internet based on mobile target defense was designed

which solved some key problems such as synchronization scheme

hopping data transmission

and verified the feasibility and effectiveness of the prototype system.

关键词

Keywords

references

HE D J , LI X R , CHAN S , et al . Security analysis of a space-based wireless network [J ] . IEEE Network , 2019 , 33 ( 1 ): 36 - 43 .

单超 , 马少煊 , 谷欣 , 等 . 卫星互联网应用与挑战 [J ] . 天地一体化信息网络 , 2024 , 5 ( 3 ): 96 - 101 .

SHAN C , MA S X , GU X , et al . Satellite Internet: application and development [J ] . Space-Integrated-Ground Information Networks , 2024 , 5 ( 3 ): 96 - 101 .

Space Exploration . SpaceX reveals 'Starshield' satellite project for national security use [R ] . 2022 .

张睿健 , 陈艺苑 . 全球首颗太空网络安全测试卫星“月光者” 影响分析 [J ] . 工业信息安全 , 2023 ( 5 ): 6 - 11 .

ZHANG R J , CHEN Y Y . Analysis of the impact of world’s first space cybersecurity test satellite moonlighter [J ] . Industry Information Security , 2023 ( 5 ): 6 - 11 .

邱涛 , 张聚名 . 基于5G技术的卫星空天地一体化网络安全研究 [J ] . 中国信息界 , 2024 ( 5 ): 35 - 36 .

QIU T , ZHANG J M . Research on network security of satellite space-space integration based on 5G technology [J ] . Information China , 2024 ( 5 ): 35 - 36 .

雷依翰 , 曹利峰 , 韩孟达 , 等 . 软件定义天地一体化网络安全切换架构与方法 [J ] . 计算机与现代化 , 2023 ( 8 ): 119 - 126 .

LEI Y H , CAO L F , HAN M D , et al . Security handover architecture and method for software defined space-ground integration network [J ] . Computer and Modernization , 2023 ( 8 ): 119 - 126 .

JAJODIA S , GHOSH A K , SWARUP V , et al . Moving target defense: creating asymmetric uncertainty for cyber threats [M ] . New York : Springer , 2011 .

周余阳 , 程光 , 郭春生 , 等 . 移动目标防御的攻击面动态转移技术研究综述 [J ] . 软件学报 , 2018 , 29 ( 9 ): 2799 - 2820 .

ZHOU Y Y , CHENG G , GUO C S , et al . Survey on attack surface dynamic transfer technology based on moving target defense [J ] . Journal of Software , 2018 , 29 ( 9 ): 2799 - 2820 .

陈廷政 . 面向主干网的DDoS攻击检测及防御方法研究 [D ] . 南京 : 东南大学 , 2022 .

CHEN Y Z . Research on detection and defense methods of DDoS attacks for backbone network [D ] . Nanjing : Southeast University , 2022 .

ROSENBERG J , SCHULZRINNE H , Camarillo . RFC3261 , SIP:Session Initiation Protocol [Z ] . 2002 .

FISCHER D , AGUILAR S I , KOISSER D , et al . Making space-link security work: auxiliary services to enable the CCSDS space data-link security protocol [C ] // Proceedings of the AIAA SPACE 2016 . Virginia : AIAA , 2016 .

MAPLE C , EPIPHANIOU G , HATHAL W , et al . The impact of message encryption on teleoperation for space applications [C ] // Proceedings of the 2022 IEEE Aerospace Conference (AERO) . Piscataway : IEEE Press , 2022 : 1 - 10 .

LIU J W , LIU W R , WU Q H , et al . Survey on key security technologies for space information networks [J ] . Journal of Communications and Information Networks , 2016 , 1 ( 1 ): 72 - 85 .

SHE C D , MA Y Q , WANG J C , et al . An improved malicious code intrusion detection method based on target tree for space information network [J ] . International Journal of Distributed Sensor Networks , 2017 , 13 ( 12 ).

景文强 , 余波 , 李昂阳 , 等 . 天地一体化信息网络主动防御安全体系研究 [J ] . 信息技术与网络安全 , 2019 , 38 ( 8 ): 17 - 21 .

JING W Q , YU B , LI A Y , et al . Research on active defense security system of space-ground information network [J ] . Information Technology and Network Security , 2019 , 38 ( 8 ): 17 - 21 .

李凤华 , 郭云川 , 耿魁 , 等 . 天地一体化信息网络安全动态赋能研究 [J ] . 无线电通信技术 , 2020 , 46 ( 5 ): 561 - 570 .

LI F H , GUO Y C , GENG K , et al . Dynamically empowering security for space-terrestrial integrated information network [J ] . Radio Communications Technology , 2020 , 46 ( 5 ): 561 - 570 .

张玲翠 , 许瑶冰 , 李凤华 , 等 . 天地一体化信息网络安全动态赋能架构 [J ] . 通信学报 , 2021 , 42 ( 9 ): 87 - 95 .

ZHANG L C , XU Y B , LI F H , et al . Dynamic security-empowering architecture for space-ground integration information network [J ] . Journal on Communications , 2021 , 42 ( 9 ): 87 - 95 .

XU S S , LIU X D , MA M M , et al . An improved mutual authentication protocol based on perfect forward secrecy for satellite communications [J ] . International Journal of Satellite Communications and Networking , 2020 , 38 ( 1 ): 62 - 73 .

Views

190

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Analysis of Starlink Constellation Technical System and Prospects for Development Trends

Signal Structure Analysis and Thought of OneWeb LEO Constellation

Post-Quantum Cryptography in Satellite Internet: Applications and Reflections

Unified Carrier Regulation and Management Technology for Multiple Baseband Systems in High Throughput Satellite Network

Satellite Internet：Application and Development

Related Author

Shang Huichao

Feng Guanghua

Wei Xiao

Cui Xiang

Wu Di

CHAI Lingyun

ZHANG Cheng

GONG Silong

Related Institution

China Satellite Network System Co., Ltd.

School of Electronic Engineering, Beijing University of Posts and Telecommunications

School of Cyber Science and Technology, Beijing University of Aeronautics and Astronautics

Commercial Satellite Group Co., Ltd., CASC

China Satellite Network Innovation Co., Ltd.

⁰