The existing wireless mesh network ( WMN) security monitoring methods do not consider the resource constraint of the nodes in WMN, so they are not practical. Centralized and distributed intrusion detection algorithms are proposed based on the link complete coverage. The security of each link is maintained by base station in centralized intrusion detection algorithm, and the genetic algorithm is used to find the optimized solution of the problem of link complete coverage, so the detection rate is im-proved;IDS is adaptively distributed into the nodes with enough remaining resource based on the prediction machinery of the re-source cost, so the resource cost of each node is balanced. Simulation experiments results show that the proposed two methods are of better security in single hop intrusion attack, multi-hop intrusion attack, and compromised attack.%已有的Wireless Mesh Network安全监控方案并未考虑WMN中节点的内存资源限制,其实用性较差.本文从2个角度出发,基于链接全覆盖提出中心型与分布式2种入侵检测算法.中心型检测方案基于基站统一检查各链接的安全性,采用遗传算法寻找链接全覆盖问题的最优解,从而提高入侵检测的准确率;分布式检测方案基于内存资源开销的预算机制自适应地将IDS(入侵检测系统)分布于剩余内存资源较多的节点,较好地平衡了各节点的内存资源开销.仿真实验结果表明,本文2种方法对于单跳、多跳入侵攻击与妥协攻击均具有较高的安全性.
展开▼
