Lightweight intrusion detection method for integrated electronic system

Abstract

The invention discloses a lightweight intrusion detection method for an integrated electronic system. The method comprises feature information extraction: monitoring and collecting data packets of communication in an integrated electronic system, extracting message features and subsystem features; intrusion detection: first establishing behavioral norms according to the characteristics of the integrated electronic system and the supported communication protocols, converting the behavioral norms into the form of a state machine, monitoring in real time whether the behavior of the system deviates from defined normal norms, and combining a distance measurement method with a probability model to determine whether an abnormal behavior detected by the behavior norms state machine is an intrusion; intrusion response: initiating an intrusion warning, and responding to and recording an intrusion event. According to the lightweight intrusion detection method, lightweight intrusion detection is achieved under consideration of limited resources of the integrated electronic system, denial of service attacks and damage integrity attacks, such as tampering with packet attacks, forging data packetattacks, attacking subsystem attacks and forgery subsystem attacks, can be effectively resisted.

Description

technical field [0001] The invention belongs to the technical field of integrated electronic system information security, in particular to a lightweight intrusion detection method for integrated electronic systems. Background technique [0002] Integrated electronic system (integrated electronic system) is widely used in communication satellites, armored vehicles, civil aviation aircraft, etc. The integrated electronic system adopts computer network technology and connects various subsystems of the equipment with a data bus to form a distributed data bus network. The integrated electronic system integrates a variety of different functional modules to form a complete system. Under unified task scheduling and management, all information management functions of the entire device are completed, and information command resource sharing is realized. [0003] Take communications satellites, for example. The integrated electronic system is the core component of the communication ...

AI Technical Summary

Problems solved by technology

Intrusion detection technology in these fields only stays at the network level, and cannot fundamentally improve the security of integrated electronic systems

Images