面向拟态防御系统的高阶异构度大数判决算法  

Majority Voting Algorithm Based on High-Order Heterogeneity for Mimic Defense System

作　　者：魏帅[1] 张辉华 苏野 薛鹏飞 闻亮 WEI Shuai;ZHANG Huihua;SU Ye;XUE Pengfei;WEN Liang(Information Technology Research Institute,PLA Strategy Support Force Information Engineering University,Zhengzhou 450003,China;Wuxi Xinwu Confidential Technology Service Center,Wuxi,Jiangsu 214000,China;Tianjin Binhai Information Technology Innovation Center,Tianjin 300450,China)

机构地区：[1]战略支援部队信息工程大学信息技术研究所,郑州450003 [2]无锡市新吴区保密技术服务中心,江苏无锡214000 [3]天津市滨海新区信息技术创新中心,天津300450

出　　处：《计算机工程》2021年第5期30-35,共6页Computer Engineering

基　　金：国家自然科学基金(61521003);国家核高基重大专项(2017ZX01030301);上海市经信委信息化发展专项“大数据发展”(201701046)。

摘　　要：异构系统之间的相似性会影响拟态防御系统异构执行体的选择和调度。目前多数针对执行体的异构性分析仍停留在二阶层面,但二阶异构度不适用于执行体数目较多的情况,难以准确评估拟态系统的防御能力。针对该问题,提出高阶异构度的概念,分析高阶异构的性质,解释高阶异构性在执行体调度及判决中所起的重要作用,并将其用于拟态防御系统安全性的量化分析。在此基础上,设计基于高阶异构度的大数判决算法,同时依据容斥原理计算系统失效率。实验结果表明,该算法可有效分析拟态系统的防御能力,并且随着执行体相似度增大以及执行体数目增多,准确性能够进一步提高。In mimic defense system,the selection and scheduling of heterogeneous executors is influenced by the similarity between heterogeneous systems,but most of the existing analysis of the heterogeneity of executors is still at 2-order,which often fails to deal with the mimic defense systems with a large number of executors and reduces the accuracy of system performance analysis.To solve the problem,this paper proposes the concept of high-order heterogeneity and its properties,explains the important role it plays in the scheduling and decision of executors,and makes a quantitative analysis of high-order heterogeneity and system security.On this basis,this paper proposes the design of a majority decision algorithm based on high-order heterogeneity,and calculates the system failure rate according to the inclusion-exclusion principle.The experimental results show that the algorithm can accurately analyze the defense performance of mimic defense systems,and its accuracy grows along with the similarity between executors and the number of executors.

关 键 词：高阶异构度 拟态防御 大数判决 执行体调度 冗余执行体 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]