一种基于执行体异构度的拟态裁决优化方法  

A Mimic Arbitration Optimization Method Based on Heterogeneous Degree of Executors

作　　者：武兆琪 张帆[1] 郭威[1] 卫今 谢光伟 WU Zhaoqi;ZHANG Fan;GUO Wei;WEI Jin;XIE Guangwei(China National Digital Switching System Engineering&Technological R&D Center,Zhengzhou 450001,China;School of Computer Science,Fudan University,Shanghai 200433,China;Data Arena Institute,Fudan University,Shanghai 200433,China)

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450001 [2]复旦大学计算机科学技术学院,上海200433 [3]复旦大学大数据试验场研究院,上海200433

出　　处：《计算机工程》2020年第5期12-18,共7页Computer Engineering

基　　金：国家自然科学基金面上项目“网络空间拟态安全异构冗余机制研究”(61572520);国家自然科学基金创新研究群体项目“网络空间拟态防御基础理论研究”(61521003);上海市信息化发展专项资金(大数据发展)项目“拟态大数据一体机研制”(201701046)。

摘　　要：网络空间拟态防御技术通过构建动态异构冗余的系统架构来提高系统的安全性能,而裁决器的表决机制是防御链中的关键步骤,直接影响拟态系统的安全性和效率。针对拟态表决环节的任务特性,对一致表决算法进行改进,设计基于执行体异构度的拟态裁决优化方法。结合拟态防御系统的异构特性,在选择执行体表决输出时引入执行体间的异构度作为决策因素,同时综合考虑执行体数目和历史记录信息,使表决算法更适用于拟态架构面临的威胁场景。实验结果表明,与一致表决算法相比,该算法能够显著提高拟态系统的安全性能,有效规避共模逃逸的风险。Mimic defense technology in cyberspace builds a dynamic heterogeneous redundant system architecture to improve the security performance of the system.In this procedure of defense,the voting mechanism of the arbiter is an important step which directly affects the security and efficiency of the mimic system.Based on the task characteristics of the voting process,this paper improves the consistent voting algorithm and proposes a mimic arbitration optimization method based on heterogeneous degree of the executors.By combining the heterogeneous characteristics in the mimic defense system,introducing the inter-executor heterogeneity as the decision factor when choosing the executor for voting output,and considering the number of executors and historical records,the voting algorithm is made more applicable to the threat scenarios faced by mimic architecture.Experimental results show that,compared with the consistent voting algorithm,the proposed algorithm can significantly improve the security performance of the mimic system and effectively suppress the risk of common mode escape.

关 键 词：拟态防御 异构冗余 裁决器 异构度 表决算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]