通信网络动目标防御技术研究  

Research on the moving target defense technology of communication networks

作　　者：向征 谭田天 蔡桂林[3] 王小峰[2] 罗跃斌[2] Xiang Zheng;Tan Tiantian;Cai Guilin;Wang Xiaofeng;Luo Yuebin(Information Centre, Hunan Institute of Information Technology, Changsha 410073;Department of Computer, National University of Defense Technology, Changsha 410073;Crop 95942, Wuhan 430313)

机构地区：[1]湖南信息学院信息中心 [2]国防科技大学计算机学院 [3]中国人民解放军95942部队

出　　处：《高技术通讯》2017年第8期690-698,共9页Chinese High Technology Letters

基　　金：863计划(2011AA01A103);高等学校博士学科点专项科研基金(20114307110006);长江学者和创新团队发展计划(IRT1012);信息保障技术重点实验室开放基金(KJ-12-07)资助项目

摘　　要：论述了通信网络动目标防御(MTD)概念,从攻击面特征及动目标防御功能性内涵的角度,对现有动目标防御技术进行了归类和分析。在现有研究的基础上设计了基于端信息跳变的动目标防御系统,并对其抗攻击性能进行了分析。该系统能通过通信过程中持续变化攻击面增大攻击成本、复杂度和降低攻击成功率,从根本上提高防御攻击的性能。该研究可为多机制结合的动目标防御系统的设计与实现提供理论基础。The concept of moving target defense （MTD） of communication networks is interpreted, and the existing moving target defense techniques are classified and analyzed from the angles of attack surface feature and functional connotation of moving target defense. A moving target defense system based on end hopping is designed on the basis of the study of present techniques of moving target denfense, and its anti-attack performance is analyzed. The system increases the attack cost and complexity and decreases the attack sucess ratge by continually changing the attack surface, thus its attack defense performance can be radically improved. This study can provide the theoretical basis for design and implementation of multi-mechanism moving target defense systems.

关 键 词：通信网络安全 动目标防御(MTD) 综述 主动防御 变换机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]