一种基于动态防御的服务功能链安全保障机制  

A Security Mechanism of Service Function Chain Based on Dynamic Defense

作　　者：古英汉 伊鹏[2] GU Yinghan;YI Peng(No.91977 Troops of PLA,Beijing 100036;National Digital Switching System Engineering&Technological R&D Center,Zhengzhou 450002)

机构地区：[1]91977部队,北京100036 [2]国家数字交换系统工程技术研究中心,郑州450002

出　　处：《舰船电子工程》2020年第10期104-108,153,共6页Ship Electronic Engineering

基　　金：国家重点基础研究发展计划(“973”计划)(编号:2012CB315901,2013CB329104);国家高技术研究发展计划(“863”计划)(编号:2015AA016102)资助。

摘　　要：基于移动目标防御技术,研究了虚拟功能服务链在网络环境中面临的攻击威胁,利用合作博弈理论设计了服务链资源安全调度模型和算法。首先介绍了动态防御技术中攻击面的概念,在此基础上建立服务链攻击面度量指标,并设计攻击面转移方法。然后基于合作博弈方法建立服务链攻击面转移模型和开销优化函数。最后给出服务链安全资源调度算法和仿真验证结果。Based on moving targets defense technology,the attacking threat to virtual function service chains in network is studied and the safe scheduling model and algorithm of service chain resourcesis are designed by using cooperative game theory.Firstly,the conception of attack surface of moving targets defense technologyis is introduced.Based on the above,the measure index of service chain attack surfaceis is built,and the methods of attack surface transfer are given.Then,the model of attack surface transfer and the optimization function of cost based on cooperative game theory are given.At last,some numerical results of attack surface transfer model and safe scheduling algorithm of service chain resources algorithm are presented.

关 键 词：动态防御 服务链 合作博弈 资源调度 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]