基于网控的军事卫星通信地球站异常检测系统研究

针对军事卫星通信系统中可能出现的因地球站被捕获、盗用、伪造和非法用户入侵等严重威胁卫星网安全的问题，提出了地球站行为异常检测的概念，并引入聚类分析和模式匹配相结合的方法，提出了一个基于网控中心的某型军事卫星通信地球站异常检测系统，对数据的预处理方法进行了改进．通过对几个经典数据集和卫星地球站真实数据的实验分析证明，该方法用于检测某型地球站异常行为是可行有效的．

Military Satellite Earth-Station Anomaly Detection Based on Satellite Communication Network Control

With regard to problems of military satellite communication network that may seriously threaten its security, such as secret leakage or intrusion, which is caused by loss or falsification of portable station,the concept of anomaly detection of station behavior was put forward,and an a- nomaly detection system of earth-station based on network control center by means of combining clustering and pattern recognition was designed and improved on the pretreatment method. Final- ly, the method is proved feasible and effective for the earth-station anomaly detection by doing ex- periment on two typical datasets and the real log-data of the satellite communication network.