一种HSS移动目标防御方法  

Moving target defense approach of HSS

作　　者：赵星[1] 汤红波[1] 王文博[1] 赵宇[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450002

出　　处：《计算机应用研究》2017年第1期238-241,260,共5页Application Research of Computers

基　　金：创新群体资助项目(61521003);国家重大专项课题资助项目(2013ZX03006002)

摘　　要：针对现有移动核心网中HSS面临的中间人攻击、Do S攻击等安全威胁,以及传统静态网络中攻击者对防御者的不对称性优势,在移动目标防御中动态地址的研究基础上提出一种HSS移动目标防御方法。对攻击源筛选问题进行建模分析,提出快速贪心算法和凸优化法高效地执行地址切换策略。仿真结果表明,快速贪心算法在阻断攻击源的同时大幅降低了时间复杂度;凸优化法通过增大求解空间减少了执行地址切换次数,降低了对核心网正常通信的影响。In current mobile core network, HSS is facing deny of service attack, man in middle attack and other security threats. Besides, in traditional static networks, attackers have asymmetric advantages over defenders. To address the problems, this paper presented a moving target defense approach of HSS based on the study of dynamic address in moving target defense. It also modeled and analysed the attacker-filter problem and proposed a fast greedy algorithm and a convex optimization method to efficiently perform the address switch strategy. The simulation results show that the fast greedy algorithm prevents attackers while significantly reducing the time complexity; the convex optimization method reduces the times of address switch byincreasing solution space and lowers the imnact on normal communication of core network.

关 键 词：移动核心网 归属签约用户服务器 移动目标防御 多代理 地址切换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]