面向云应用的拟态云服务架构  

Mimic cloud service architecture for cloud applications

作　　者：普黎明 卫红权 李星[1] 江逸茗[1] PU Liming;WEI Hongquan;LI Xing;JIANG Yiming(Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]信息工程大学,河南郑州450001

出　　处：《网络与信息安全学报》2021年第1期101-112,共12页Chinese Journal of Network and Information Security

基　　金：国家科技重大专项基金(2018ZX03002002);国家自然科学基金(61521003)。

摘　　要：针对单执行体的云应用服务缺乏异构性和动态性,难以应对未知漏洞和后门的安全威胁问题,提出一种拟态云服务架构,把云平台向用户提供的应用服务节点构造成基于拟态防御技术的服务包,使应用服务具有拟态构造带来的内生安全特性和鲁棒性,同时讨论了策略调度和裁决机制等两项关键的拟态云服务运行机制。经实验分析表明,拟态云服务具有较好的安全性,可以通过减小执行体的性能差异降低其响应时延。In order to solve the problem of the lack of heterogeneity and dynamics of cloud application services with a single executor,and the difficulty of dealing with the security threats of unknown vulnerabilities and backdoors,a mimic cloud service architecture was proposed.In this architecture,the application services provided by the cloud platform were constructed into a service package based on mimic defense technology,so that the application services had the endogenous security features and robustness brought by mimic structure.At the same time,two key mimic cloud services operating mechanism,policy scheduling and adjudication mechanism were discussed.The experimental results and analysis show that the mimic cloud service obtains better security and its response time delay can be reduced by reducing the performance difference of the executor.

关 键 词：拟态云服务 响应时延 动态 异构 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]