一种基于拟态防御的差异化反馈调度判决算法  

A differential feedback scheduling decision algorithm based on mimic defense

作　　者：高明[1] 罗锦 周慧颖 焦海 应丽莉 GAO Ming;LUO Jin;ZHOU Huiying;JIAO Hai;YING Lili(School o f Information and Electronic Engineering,Zhejiang Gongshang University,Hangzhou 310018,China)

机构地区：[1]浙江工商大学信息与电子工程学院,浙江杭州310018

出　　处：《电信科学》2020年第5期73-82,共10页Telecommunications Science

基　　金：国家重点研发计划基金资助项目(NO.2017YFB0803202);国家自然科学基金资助项目(No.61871468);浙江省自然科学基金资助项目(No.LY18F010006);浙江省新型网络标准与应用技术重点实验室基金资助项目(No.2013E 10012);浙江省重点研发计划基金资助项目(No.2019C01056,No.2020C01079)。

摘　　要：面对服务路径的安全性问题,根据拟态防御理论里的基于动态异构冗余(dynamicheterogeneousredundancy,DHR)模型的服务功能链部署拟态防御体系架构,并结合服务路径部署的实际需求,提出了一种基于拟态防御的差异化反馈调度判决算法。首先依据调度算法中执行体集的异构度及安全防御系数,从执行体池中筛选出适合拟态防御场景的调度器,然后根据判决算法的可靠度系数及多数判决算法选出判决器,最后,对本文算法与普通的调度算法、判决算法进行仿真分析。仿真结果表明,本文算法可有效地提升系统的防御能力,保障服务路径配置的安全。Facing the security problem of the service path, according to the service function chain deployment mimic defense architecture based on dynamic heterogeneous redundancy(DHR) model in the mimic defense theory, and combined with the actual needs of the service path deployment, a differential feedback scheduling decision algorithm based on mimic defense was proposed. Firstly, according to the heterogeneity of the executive set in the scheduling algorithm and the security defense coefficient, the scheduler suitable for the mimic defense scenario was selected from the executive pool, and then the decider was selected according to the reliability coefficient of the decision algorithm and the majority decision algorithm. The proposed algorithm, common scheduling algorithm and decision algorithm were simulated and analyzed. Simulation results show that the proposed algorithm can effectively improve the system’s defense capabilities and ensure the security of the service path configuration.

关 键 词：拟态防御 调度算法 判决算法 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]