车联网中基于攻防博弈的蜜罐防御及传输策略

易杰; 曹腾飞; 郜帅; 黄建强

doi:10.11959/j.issn.2096-109x.2022050

您当前的位置：

首页 >

文章列表页 >

车联网中基于攻防博弈的蜜罐防御及传输策略

学术论文 | 更新时间：2024-06-03

- 车联网中基于攻防博弈的蜜罐防御及传输策略
- Honeypot defense and transmission strategy based on offensive and defensive games in vehicular networks
- 网络与信息安全学报 2022年8卷第4期页码：157-167
- 作者机构：
  
  1. 青海大学计算机技术与应用系，青海西宁 810016
  2. 北京交通大学移动专用网络国家工程研究中心，北京 100044
- 作者简介：
  
  [ "易杰（1998− ），男，湖北荆州人，青海大学硕士生，主要研究方向为网络欺骗和攻防博弈" ]
  [ "曹腾飞（1987− ），男，湖北钟祥人，青海大学副教授、博士生导师，主要研究方向为智能网络优化和网络攻防" ]
  [ "郜帅（1980− ），男，河南济源人，北京交通大学教授、博士生导师，主要研究方向为网络空间安全和信息网络理论及关键技术" ]
  [ "黄建强（1985− ），男，陕西西安人，青海大学教授，主要研究方向为移动计算、云计算和大数据" ]
- 基金信息：
  
  国家自然科学基金;TheNational Natural Science Foundation of China(62101299;62162053);青海省自然科学基金;The Natural Science Foundation of Qinghai Province(2020-ZJ-943Q)
- DOI：10.11959/j.issn.2096-109x.2022050
  中图分类号： TP393
- 网络首发：2022-08，
  
  纸质出版：2022-08-15
- 稿件说明：
移动端阅览
易杰, 曹腾飞, 郜帅, 等. 车联网中基于攻防博弈的蜜罐防御及传输策略[J]. 网络与信息安全学报, 2022,8(4):157-167.

Jie YI, Tengfei CAO, Shuai GAO, et al. Honeypot defense and transmission strategy based on offensive and defensive games in vehicular networks[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 157-167.
易杰, 曹腾飞, 郜帅, 等. 车联网中基于攻防博弈的蜜罐防御及传输策略[J]. 网络与信息安全学报, 2022,8(4):157-167. DOI： 10.11959/j.issn.2096-109x.2022050.

Jie YI, Tengfei CAO, Shuai GAO, et al. Honeypot defense and transmission strategy based on offensive and defensive games in vehicular networks[J]. Chinese Journal of Network and Information Security, 2022, 8(4): 157-167. DOI： 10.11959/j.issn.2096-109x.2022050.

摘要

随着车联网的快速发展，服务提供商通过将5G基站型路侧单元（RSU，road side unit）部署在靠近车辆的位置，能够迅速为车辆用户提供缓存服务。然而，由于恶意攻击者的存在，其通过控制基站获取权限使基站变为恶意基站，达到身份伪造攻击的目的，并以恶意基站的名义发送消息干扰车辆与可信基站之间的通信链路，容易造成严重的行车安全问题。提出了车联网中基于攻防博弈的蜜罐防御及传输策略，通过部署蜜罐基站混淆攻击者，从而降低车联网中身份伪造攻击的风险，提高车联网数据传输的可靠性。将车联网场景中可信基站与恶意基站之间的交互问题建模为攻防博弈模型，在此基础上可信基站与蜜罐基站联合作为防守方来抵御恶意攻击。可信基站和恶意基站作为攻防博弈双方选择各自相应的策略，构建双方效益函数模型，并结合车辆时延反馈机制，防守方与恶意基站动态调整各自策略。通过调整蜜罐基站与车辆的交互性和 IP 随机化程度，使防守方的整体效益得到有效提升，并利用混合策略纳什均衡理论得出最优解。大量的仿真实验结果表明，所提出的策略能够在恶意攻击者存在的情况下，提高车联网服务的安全传输性能，对比无蜜罐防御方案，防守方期望效益提升了48.9%，数据传输时延降低了57.1%。

Abstract

With the rapid development of the Internet of Vehicles

service providers can efficiently provide caching services for vehicle users by deploying 5G base station-type RSUs adjacent to vehicles.However

due to the presence of malicious attackers

the controlled base station is turned to be malicious for the purpose of identity forgery attack.When messages are sent in the name of malicious base stations to interfere with the communication link between vehicles and the trusted base stations

it is easy to cause serious driving safety problems.To solve the above problem

an efficient transmission and honeypot defense strategy was proposed

which was based on the offensive and defensive game in the Internet of Vehicles to reduce the risk of identity forgery attacks and improve the security of data transmission.The interaction between trusted base stations and malicious base stations in the Internet of Vehicles scenario was modeled as an attack-defense game model.On this basis

trusted base stations and honeypot base stations were jointly used as defenders to defend against malicious attacks.Then

the trusted base station and the malicious base station

as the two sides of the offensive and defensive game

chose their respective strategies to construct a model of the benefit function of both sides.Combined with the vehicle delay feedback mechanism

the defender and the malicious base station dynamically adjusted their respective strategies.By adjusting the interaction between the honeypot base station and the vehicle

and also the degree of IP randomization

the overall benefit of the defender was effectively improved.Besides

the optimal solution was obtained by using the mixed strategy Nash equilibrium theory.Simulation experimental results show that the proposed strategy can improve the secure transmission performance of the Internet of Vehicles service in the presence of malicious attackers

and the defender’s expected benefit is improved by 48.9% and the data transmission delay is reduced by 57.1% compared to the no-honeypot defense scheme.

关键词

Keywords

references

任沁沁 . 全国机动车保有量达3.95亿辆,驾驶人达4.81亿人 [N ] . 新华每日电讯 ,2022-01-12(2).

REN Q Q . There are 395 million motor vehicles in China and 481 million drivers [N ] . Xinhua Daily Telegraph ,2022-01-12(2).

杨德全 , 刘卫民 , 俞宙 . 基于蜜罐的主动防御应用研究 [J ] . 网络与信息安全学报 , 2018 , 4 ( 1 ): 57 - 62 .

YANG D Q , LIU W M , YU Z . Research on active defense application based on honeypot [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 1 ): 57 - 62 .

胡永进 , 马骏 , 郭渊博 . 基于博弈论的网络欺骗研究 [J ] . 通信学报 , 2018 , 39 ( S2 ): 9 - 18 .

HU Y J , MA J , GUO Y B . Research on cyber deception based on game theory [J ] . Journal of Communication , 2018 , 39 ( S2 ): 9 - 18 .

JAJODIA S . A probabilistic logic of cyber deception [J ] . IEEE Transactions on Information Forensics and Security , 2017 , 12 ( 11 ): 2532 - 2544 .

石乐义 , 赵俊楠 , 李芹 , 等 . 基于信令博弈的网络诱骗防御策略分析与仿真 [J ] . 系统仿真学报 , 2016 , 28 ( 2 ): 348 - 353 .

SHI L Y , ZHAO J N , LI Q , et al . Signaling game analysis and simulation on network decoy defense strategies [J ] . Journal of System Simulation , 2016 , 28 ( 2 ): 348 - 353 .

刘小虎 , 张恒巍 , 马军强 , 等 . 基于攻防博弈的网络防御决策方法研究综述 [J ] . 网络与信息安全学报 , 2022 , 8 ( 1 ): 1 - 14 .

LIU X H , ZHANG H W , MA J Q , et al . Research review of network defense decision-making methods basedon attack and defense game [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 1 ): 1 - 14 .

LA Q D , QUEK T Q S , LEE J , et al . Deceptive attack and defense game in honeypot-enabled networks for the internet of things [J ] . IEEE Internet of Things Journal , 2016 , 3 ( 6 ): 1025 - 1035 .

XU Q , SU Z , ZHANG K . Game theoretical secure caching scheme in multi-homing heterogeneous networks [C ] // 2018 IEEE International Conference on Communications (ICC) . 2018 : 1 - 6 .

YAO R , ZHANG G , FAN Y , RABIE KM , KAIWARTYA O , et al . Untrusted relay selection and secure transmission optimization based on stack-elberg game [C ] // 2021 6th International Conference on Intelligent Computing and Signal Processing (ICSP) . 2021 : 534 - 539 .

MAKARFIET A U , RABIE KM , KAIWARTYA O , et al . Toward physical-layer security for internet of vehicles:interference-aware modeling [J ] . IEEE Internet of Things Journal , 2021 , 8 ( 1 ): 443 - 457 .

SEDJELMACI H , BRAHMI I H , ANSARI N , et al . M.Cyber security framework for vehicular network based on a Hierarchical Game [J ] . IEEE Transactions on Emerging Topics in Computing , 2021 , 9 ( 1 ): 429 - 440 .

LIU B , SU Z , XU Q . Game theoretical secure wireless communication for UAV-assisted vehicular Internet of Things [J ] . China Communications , 2021 , 18 ( 7 ): 147 - 157 .

曹腾飞 , 江翠丽 , 刘志强 , 等 . 基于信息中心 5G 车联网中社会感知的流媒体缓存与转发策略 [J ] . 电信科学 , 2019 , 35 ( 12 ): 90 - 98 .

CAO T F , JIANG C L , LIU Z Q , et al . Social-aware caching and forwarding for video streaming in information-centric 5G VANET [J ] . Telecommunications Science , 2019 , 35 ( 12 ): 90 - 98 .

CAO T , XUET C . Reliable and efficient multimedia service optimization for edge computing-based 5g networks:game theoretic approaches [J ] . IEEE Transactions on Network and Service Management , 2020 , 17 ( 3 ): 1610 - 1625 .

SUN J , SUN K . DESIR:decoy-enhanced seamless IP randomiza-tion [C ] // IEEE INFOCOM 2016 - The 35th Annual IEEE Interna-tional Conference on Computer Communications . 2016 .

XIE L , SU Z , CHEN N , et al . A game theory based scheme for secure and cooperative UAV communication [C ] // ICC 2021- IEEE International Conference on Communications . 2021 : 1 - 6 .

XU Q , SU Z , YU S , et al . Trust based incentive scheme to allocate big data tasks with mobile social cloud [J ] . IEEE Transactions on Big Data , 2022 , 8 ( 1 ): 113 - 124 .

浏览量

289

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

FL-IoV：基于联邦学习的综合车联网入侵检测方法

激励驱动的联邦学习研究综述：隐私与安全

基于国密SM2的车联网高效匿名认证协议

基于深度学习的车联网无线密钥生成系统

面向车联网的匿名组密钥分发方案