【摘要】 针对传统的节点捕获早期检测方法未考虑物联网网络结构的问题，提出了一种面向服务器客户端网络结构的节点捕获早期检测方法。方法基于节点间的存活性监控，通过MQTT协议中服务器与客户端心跳消息和邻居节点问候消息结合的方式，保证能在捕获攻击的早期发现通信异常的节点。在节点状态的决策过程中，由服务器心跳消息异常响应进入节点审查环节，采用逐步统计、多方协同的方式来降低误报率。实验结果表明，上述方法在提高检测率、降低误报率方面效果较好。更多还原

【Abstract】 Aiming at the problem that the traditional early detection method does not consider the network structure of the Internet of Things, a node capture early detection method oriented to the serverclient network structure is proposed. This method is based on node survivability monitoring, and through the combination of MQTT protocol heartbeat messages and neighbor node greeting messages, it can ensure that the nodes with abnormal communication can be found early in the capture attack.. At the same time, stepwise review and multi-party coordination were used in the decision-making process of node status to reduce false alarm rate. Experimental results show that this method is effective in improving the detection rate and reducing the false alarm rate.更多还原