拟态通用运行环境的框架设计  

Framework Design of Mimic Common Operating Environment

作　　者：付琳 邵培南[1] 应飞[1] 解维[1] FU Lin;SHAO Peinan;YING Fei;XIE Wei(The 32nd Research Institute of China Electronics Technology Group Corporation,Shanghai 201808,China)

机构地区：[1]中国电子科技集团公司第三十二研究所,上海201808

出　　处：《计算机工程》2020年第3期24-33,共10页Computer Engineering

基　　金：上海市科学技术委员会科研计划“拟态容器安全云平台研究”(18511104402)。

摘　　要：为实现信息系统安全防御的目的,针对动态异构冗余(DHR)架构设计拟态通用运行环境(MCOE)框架。以拟态化改造后功能等价的异构冗余信息系统应用程序,以及异构化的信息系统运行环境设施为对象,为N异构执行体构建面向服务请求的资源调度、分发、执行、表决、安全威胁清洗恢复以及管理的自动化运行支撑环境,提供拟态产品的分发、表决统一集成接口规范。在该框架中,服务请求主键驱动的N个异构执行体和MCOE分发、内部表决、外部表决、协同执行、管理5个服务器交互运行。仿真结果表明,该设计可有效抵御软硬件后门和漏洞引发的网络攻击。For information system security,this paper proposes a Mimic Common Operating Environment(MCOE)framework for Dynamic Heterogeneous Redundancy(DHR)architecture.The objects of the framework are heterogeneous redundancy information system application that is functionally equivalent to the system before mimicry transformation and running environment facilities of heterogeneous information systems.For N heterogeneous executive bodies,the framework constructs a supportive environment for automation to process resource allocation,distribution,execution,voting,security threat cleaning recovery and management for service requests.The framework provides uniform integrated interface standards for the distribution and voting of mimicry products.In this framework,the N heterogeneous executors driven by the primary key of service request and five servers,MCOE distribution,internal voting,external voting and management servers collaborative execute.Simulation results show that the design can effectively protect network attacks from hardware and software backdoor and vulnerability.

关 键 词：拟态防御 动态异构冗余 拟态通用运行环境 分发服务 表决服务 管理服务 服务请求主键 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]