基于深度确定性策略梯度的随机路由防御方法  

Random routing defense method based on deep deterministic policy gradient

作　　者：徐潇雨 胡浩[1,2] 张红旗 刘玉岭[3] XU Xiaoyu;HU Hao;ZHANG Hongqi;LIU Yuling(Cryptography Engineering Institute,Information Engineering University,Zhengzhou 450001,China;Henan Key Laboratory of Information Security,Zhengzhou 450001,China;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100190,China)

机构地区：[1]信息工程大学密码工程学院,河南郑州450001 [2]河南省信息安全重点实验室,河南郑州450001 [3]中国科学院信息工程研究所,北京100190

出　　处：《通信学报》2021年第6期41-51,共11页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61902427,No.61802404)。

摘　　要：针对现有随机路由防御方法对数据流拆分粒度过粗、对合法的服务质量(QoS)保障效果不佳、对抗窃听攻击的安全性有待提升等问题,提出一种基于深度确定性策略梯度(DDPG)的随机路由防御方法。通过带内网络遥测(INT)技术实时监测并获取网络状态;通过DDPG方法生成兼顾安全性和QoS需求的随机路由方案;通过P4框架下的可编程交换机执行随机路由方案,实现了数据包级粒度的随机路由防御。实验表明,与其他典型的随机路由方法相比,所提方法在对抗窃听攻击中的安全性和对网络整体QoS的保障效果均有提升。To solve the problem of the existing routing shuffling defenses,such as too coarse data flow splitting granularity,poor protection effect on legitimate QoS and the security against eavesdropping attacks needed to be improved,a random routing defense method based on DDPG was proposed.INT was used to monitor and obtain the network state in real time,DDPG algorithm was used to generate random routing scheme considering both security and QoS requirements,random routing scheme was implemented with programmable switch under P4 framework to realize real-time routing shuffling with packet level granularity.Experiment results show that compared with other typical routing shuffling defense methods,the security and QoS protection effect of the proposed method are improved.

关 键 词：随机路由 深度确定性策略梯度 窃听攻击 移动目标防御 

分 类 号：TP939[自动化与计算机技术]