基于拟态防御和Paillier加密的智能物联网终端安全防护方法

顾天晟; 曾福康; 邵思思; 聂一君; 纪宗凯; 郑雨璐; 石雨辰; 刘尚东; 季一木

doi:10.11959/j.issn.2096-109x.2024088

您当前的位置：

首页 >

文章列表页 >

基于拟态防御和Paillier加密的智能物联网终端安全防护方法

学术论文 | 更新时间：2025-02-06

- 基于拟态防御和Paillier加密的智能物联网终端安全防护方法
- Security protection method based on mimic defense and Paillier encryption for smart IoT terminals
- 网络与信息安全学报 2024年10卷第6期页码：164-176
- 作者机构：
  
  1.南京邮电大学计算机学院、软件学院、网络空间安全学院，江苏南京 210023
  2.南京邮电大学物联网学院，江苏南京 210023
  3.南京邮电大学高性能计算与大数据处理研究所，江苏南京 210023
  4.国家高性能计算中心南京分中心，江苏南京 210023
- 作者简介：
  
  [ "顾天晟（2000- ），男，江苏南通人，南京邮电大学硕士生，主要研究方向为拟态防御、网络安全。" ]
  [ "曾福康（1999- ），男，江苏扬州人，南京邮电大学硕士生，主要研究方向为网络安全、公钥密码学。" ]
  [ "邵思思（1997- ），女，江苏东海人，南京邮电大学博士生，主要研究方向为内生安全、主动防御。" ]
  [ "聂一君（2000- ），男，河南周口人，南京邮电大学硕士生，主要研究方向为内生安全、网络安全。" ]
  [ "纪宗凯（2001- ），男，江苏盐城人，南京邮电大学硕士生，主要研究方向为网络安全。" ]
  [ "郑雨璐（2001- ），女，河南鹤壁人，南京邮电大学硕士生，主要研究方向为内生安全、拟态防御和纠错编码通信。" ]
  [ "石雨辰（2000- ），男，山西临汾人，南京邮电大学硕士生，主要研究方向为网络安全。" ]
  [ "刘尚东（1979- ），男，江苏南京人，博士，南京邮电大学讲师，主要研究方向为网络行为分析、大数据与人工智能。" ]
  [ "季一木（1978- ），男，安徽无为人，博士，南京邮电大学教授、博士生导师，主要研究方向为云计算、大数据、物联网和人工智能安全及应用。" ]
- 基金信息：
  
  国家自然科学基金(62176264);国家重点研发计划项目(2023YFB2904000;2023YFB2904004);江苏省重点发展规划项目(BE20230042);江苏省自然科学及高校自然科学重大项目(20KJA520001);中国电信江苏分公司2023年科技项目(JSSGS2301022EGN00);未来网络科学研究基金项目(FNSRFP-2021-YB-15)
- DOI：10.11959/j.issn.2096-109x.2024088
  中图分类号： TP393
- 收稿：2024-03-29，
  
  修回：2024-09-10，
  
  纸质出版：2024-12-25
- 稿件说明：
移动端阅览
顾天晟, 曾福康, 邵思思, 等. 基于拟态防御和Paillier加密的智能物联网终端安全防护方法[J]. 网络与信息安全学报, 2024, 10(6): 164-176.

GU T S, ZENG F K, SHAO S S, et al. Security protection method based on mimic defense and Paillier encryption for smart IoT terminals[J]. Chinese Journal of Network and Information Security, 2024, 10(6): 164-176.
顾天晟, 曾福康, 邵思思, 等. 基于拟态防御和Paillier加密的智能物联网终端安全防护方法[J]. 网络与信息安全学报, 2024, 10(6): 164-176. DOI： 10.11959/j.issn.2096-109x.2024088.

GU T S, ZENG F K, SHAO S S, et al. Security protection method based on mimic defense and Paillier encryption for smart IoT terminals[J]. Chinese Journal of Network and Information Security, 2024, 10(6): 164-176. DOI： 10.11959/j.issn.2096-109x.2024088.

摘要

智能物联网具有高灵活性、自适应性、持续演化等特性，为用户带来更加极致的体验的同时也带来了新的挑战，智能物联网难以杜绝的未知漏洞和后门等不确定威胁导致的物联网边域智能终端内生安全问题和安全传输问题正备受关注。为此，提出了一种基于拟态防御和Paillier加密的智能物联网终端安全防护方法。首先，基于拟态防御理论构建了智能物联网终端安全防护架构，以确保边域智能终端在自身存在安全基因缺陷时仍能保障系统的可靠性和鲁棒性。然后，在该架构中设计了一种基于Paillier加密的安全盲签名（SBSPE

secure blind signing with paillier encryption）算法，以确保边域智能终端在数据处理全流程中的数据与隐私安全。SBSPE算法在Paillier半同态加密算法的基础上引入盲签名技术，在对数据加密的同时基于盲因子技术进行盲签名，使攻击者即使获得Paillier加密算法的解密密钥，也无法解密密文信息，有效支撑了智能物联网设备的数据高效、可靠传输。最后，以拟态智能物联网系统为应用场景，从性能和安全两方面对基于拟态防御的智能物联网终端半同态加密传输方法进行理论分析和实验验证，证明所提方法的有效性和安全性。

Abstract

Smart internet of things (IoT)

with its high flexibility

adaptability

and continuous evolution

brings both new challenges and enhanced user experiences. In particular

the endogenous security and secure transmission issues faced by IoT edge-area smart terminals

due to uncertain threats like unknown vulnerabilities and backdoors

are of considerable concern in the realm of smart IoT. To address these challenges

a security protection method based on mimic defense and Paillier encryption for smart IoT terminals was proposed. First

a security architecture was constructed based on the mimic defense theory to ensure the reliability and robustness of the system even when the edge domain smart terminal had its own security genetic defects. Then

a secure blind signature with Paillier encryption (SBSPE) algorithm was designed in this architecture to safeguard the data and privacy of the edge-area smart terminals throughout the data processing lifecycle of edge-area smart terminals. Blind signature technology was integrated into SBSPE algorithm on the basis of Paillier semi-homomorphic encryption algorithm. During data encryption

it employed blind factor technology to execute a blind signature

rendering ciphertext information indecipherable even if an attacker obtained access to the decryption key of the Paillier encryption algorithm. It also effectively supported the efficient and reliable transmission of data of the intelligent IoT devices. Finally

taking the mimic smart IoT system as an application scenario

the proposed method was theoretically analyzed and experimentally validated for its improved performance and security.

关键词

Keywords

references

LAGHARI A A , WU K , LAGHARI R A , et al . A review and state of art of internet of things (IoT) [J ] . Archives of Computational Methods in Engineering , 2021 : 1 - 19 .

郭斌 , 刘思聪 , 刘琰等 . 智能物联网：概念、体系架构与关键技术 [J ] . 计算机学报 , 2023 , 46 ( 11 ): 2259 - 2278 .

GUO B , LIU S C , LIU Y , et al . AIoT: the concept, architecture and key techniques [J ] . Chinese Journal of Computers , 2023 , 46 ( 11 ): 2259 - 2278 .

QADRI Y A , NAUMAN A , ZIKRIA Y B , et al . The future of healthcare internet of things: a survey of emerging technologies [J ] . IEEE Communications Surveys & Tutorials , 2020 , 22 ( 2 ): 1121 - 1167 .

DAVIS B D , MASON J C , ANWAR M . Vulnerability studies and security postures of IoT devices: a smart home case study [J ] . IEEE Internet of Things Journal , 2020 , 7 ( 10 ): 10102 - 10110 .

顾伟 , 沈剑 , 任勇军 . 基于智能电网的安全密钥共享算法 [J ] . 网络与信息安全学报 , 2021 , 7 ( 4 ): 141 - 146 .

GU W , SHEN J , REN Y J . Secure key-sharing algorithm based on smart grid [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 4 ): 141 - 146 .

何智旺 , 王化群 . 面向车联网的匿名组密钥分发方案 [J ] . 网络与信息安全学报 , 2023 , 9 ( 5 ): 127 - 137 .

HE Z W , WANG H Q . Anonymous group key distribution scheme for the internet of vehicles [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 5 ): 127 - 137 .

ABADIA J J P , WALTHER C , OSMAN A , et al . A systematic survey of Internet of things frameworks for smart city applications [J ] . Sustainable Cities and Society , 2022 , 83 : 103949 .

HOU R , REN G , ZHOU C , et al . Analysis and research on network security and privacy security in ubiquitous electricity internet of things [J ] . Computer Communications , 2020 , 158 : 64 - 72 .

LETAFATI M , KUHESTANI A , WONG K K , et al . A lightweight secure and resilient transmission scheme for the internet of things in the presence of a hostile jammer [J ] . IEEE Internet of Things Journal , 2020 , 8 ( 6 ): 4373 - 4388 .

NIU S F , HU Y , ZHOU S W , et al . Attribute-based searchable encryption in edge computing for lightweight devices [J ] . IEEE Systems Journal , 2023 , 17 ( 3 ): 3503 - 3514 .

WU J H , SHENG X F , LI G S , et al . An efficient and secure aggregation encryption scheme in edge computing [J ] . China Communications , 2022 , 19 ( 3 ): 245 - 257 .

杨亚涛 , 林天祥 , 陈剑源等 . 边缘计算模式下全同态加密智能合约设计 [J ] . 信息安全学报 , 2022 , 7 ( 2 ): 150 - 162 .

YANG Y T , LIN T X , CHEN J Y , et al . Smart contract with fully homomorphic encryption under edge computing mode [J ] . Journal of Cyber Security , 2022 , 7 ( 2 ): 150 - 162 .

CHEN X . A security integration model for private data of intelligent mobile communication based on edge computing [J ] . Computer Communications , 2020 , 162 : 204 - 211 .

LIANG W , XIE S , CAI J , et al . Novel private data access control scheme suitable for mobile edge computing [J ] . China Communications , 2021 , 18 ( 11 ): 92 - 103 .

YAN X , WU Q , SUN Y . A homomorphic encryption and privacy protection method based on blockchain and edge computing [J ] . Wireless Communications and Mobile Computing , 2020 , 2020 : 1 - 9 .

XU G , DONG J , MA C , et al . A certificateless signcryption mechanism based on blockchain for edge computing [J ] . IEEE Internet of Things Journal , 2023 , 10 ( 14 ): 11960 - 11974 .

AL SHAHRANI A M , RIZWAN A , SANCHEZ-CHERO M , et al . Blockchain-enabled federated learning for prevention of power terminals threats in IoT environment using edge zero-trust model [J ] . The Journal of Supercomputing , 2023 : 1 - 27 .

LIAO J , WANG H , WU J . A multikey fully homomorphic encryption privacy protection protocol based on blockchain for edge computing system [J ] . Concurrency and Computation: Practice and Experience , 2023 , 35 ( 4 ): e7539 .

王瑞锦 , 唐榆程 , 张巍琦 , 等 . 基于同态加密和区块链技术的车联网隐私保护方案 [J ] . 网络与信息安全学报 , 2020 , 6 ( 1 ): 46 - 53 .

WANG R J , TANG Y C , ZHANG W Q , et al . Privacy protection scheme for internet of vehicles based on homomorphic encryption and block chain technology [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 1 ): 46 - 53 .

CHEN W , WANG Z , GE Q , et al . Quantized distributed economic dispatch for microgrids: paillier encryption–decryption scheme [J ] . IEEE Transactions on Industrial Informatics , 2024 , 20 ( 4 ): 6552 - 6562 .

邬江兴 . 网络空间内生安全：拟态防御与广义鲁棒控制 [M ] . 北京 : 科学出版社 , 2020 : 587 – 588 .

WU J X . Endogenous security in cyberspace: mimetic defense and generalized robust control [M ] . Beijing : China Science Publishing & Media Ltd , 2020 : 587 – 588 .

ZHENG Y , LI Z , XU X , et al . Dynamic defenses in cyber security: techniques, methods and challenges [J ] . Digital Communications and Networks , 2022 , 8 ( 4 ): 422 - 435 .

普黎明 , 卫红权 , 李星 , 等 . 面向云应用的拟态云服务架构 [J ] . 网络与信息安全学报 , 2021 , 7 ( 1 ): 101 - 112 .

PU L M , WEI H Q , LI X , et al . Mimic cloud service architecture for cloud applications [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 1 ): 101 - 112 .

SHAO S S , JI Y M , ZHANG W L , et al . A DHR executor selection algorithm based on historical credibility and dissimilarity clustering [J ] . Science China Information Sciences , 2023 , 66 ( 11 ): 212304 .

TAO Y , KONG F , YU J , et al . EPPSA: efficient privacy‐preserving statistical aggregation scheme for edge computing‐enhanced wireless sensor networks [J ] . Security and Communication Networks , 2022 , 2022 ( 1 ): 7359134 .

XIE C , WENG J , ZHOU D H . Revocable identity-based fully homomorphic signature scheme with signing key exposure resistance [J ] . Information Sciences , 2022 , 594 : 249 - 263 .

HU Z X , KAIS S . A quantum encryption design featuring confusion, diffusion, and mode of operation [J ] . Scientific Reports , 2021 , 11 ( 1 ): 23774 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于免疫算法的网络功能异构冗余部署方法

拟态多执行体架构下的超时阈值计算方法

基于离散马尔可夫链的不同抗干扰系统模型分析