移动Ad Hoc网络动态信任管理机制的研究

The problem of various network attacks threatens the security of mobile ad hoc networks. Utilizing dynamic trust management is an effective method to deal with this problem, which can establish a dynamic trusted computing environment, and directly involve the trust of entity node as part of the authorization to the network security decision. However, the universality and flexibility of the model in the existing mechanism is insufficient. This project will research on the theory of dynamic trust management to deal with the above mentioned problem, and design a proper dynamic trust management mechanism suitable for the embed networks. Our researches include the following aspects. For the purpose of obtaining high quality trust evaluation information, we will design an information gathering scheme based on fuzzy clustering analysis theory, focusing on the trust factors and the node roles of gathering information. In order to quantitatively establish trust relationship among entity nodes, we will construct an efficient dynamic trust model. We try to reasonably measure the dynamic nature of the trust relationship via using multi-dimensional trust decision factors based on objective and subjective combination weighting method. With the help of random state transition mechanism, we can ratiocinate and demonstrate the timeliness of trust relationship. In additional, we will develop the dynamic classification management strategies for different trust-level nodes. We will do a research on the new trust extension schemes, which can be divided into the traditional extension scheme based on the trust model integration and the strategy extension scheme based on the finite horizon model. The real-time, validity and reliability of the routing information can be dynamically determined in the process of routing decisions. Based on the above mentioned extension schemes, finally we will propose the trust-based routing protocols with low overhead.

网络攻击问题严重威胁着移动Ad Hoc网络的安全性，动态信任管理是增强该网络安全性的有效方法。这种方法可为网络建立动态的可信计算环境，并通过将网内节点的可信度作为授权的组成部分直接参与网络安全决策。然而现有机制中模型的通用性和灵活性较低，本课题将针对该问题对动态信任管理理论进行系统研究，设计适用于该网络环境的动态信任管理机制。主要内容包括：设计基于模糊聚类分析理论的信息采集方案，用于网络获取高质量的信任评估信息，方案中将重点研究信任组成因素和节点采集角色；构建高效的动态信任模型，建立节点间的动态信任关系，通过多维信任决策要素主客观融合赋权评估信任关系的动态性，借助随机状态转移推理信任关系的时效性，并制定动态的节点分级管理策略；研究基于信任模型融合的传统信任扩展方案和基于有限阶段模型的策略信任扩展方案，在路由决策过程中动态地确定路由信息的实时性、有效性和可靠性，设计实现低开销的可信路由协议。

网络攻击问题严重威胁着移动Ad Hoc网络的安全性，动态信任管理是增强该网络安全性的有效方法。这种方法可为网络建立动态的可信计算环境，并通过将网内节点的可信度作为授权的组成部分直接参与网络安全决策。然而现有机制中模型的通用性和灵活性较低，本课题将针对该问题对动态信任管理理论进行系统研究，设计适用于该网络环境的动态信任管理机制。主要内容包括：设计基于模糊聚类分析理论的信息采集方案，用于网络获取高质量的信任评估信息，方案中将重点研究信任组成因素和节点采集角色；构建高效的动态信任模型，建立节点间的动态信任关系，通过多维信任决策要素主客观融合赋权评估信任关系的动态性，借助随机状态转移推理信任关系的时效性，并制定动态的节点分级管理策略；研究基于信任模型融合的传统信任扩展方案和基于有限阶段模型的策略信任扩展方案，在路由决策过程中动态地确定路由信息的实时性、有效性和可靠性，设计实现低开销的可信路由协议。