基于多变量的执行体动态调度算法  

A Multivariate Dynamic Scheduling Algorithm for Heterogeneous Executor

作　　者：张振嘉 甘刚 ZHANG Zhenjia;GAN Gang(College of Cybersecurity,Chengdu University of Information Technology,Chengdu 610225,China)

机构地区：[1]成都信息工程大学网络空间安全学院,四川成都610225

出　　处：《成都信息工程大学学报》2024年第1期28-36,共9页Journal of Chengdu University of Information Technology

基　　金：四川省哲学社会科学基金资助项目(SC21B034);四川省科技厅重点研发资助项目(23ZDYF0380、2021ZYD0011)。

摘　　要：拟态防御技术致力于从内生安全的角度构建安全可靠的系统来解决网络空间中攻防不对称的问题。作为拟态防御中的重要部件,调度模块的关键问题之一是异构冗余体的量化工作。而现有的研究中对异构冗余体的指标不能全面量化,同时调度算法大多将执行体数量设定为某一固定值,对安全性、动态性以及运行效率造成影响。结合调度算法的特性,分析异构冗余体量化过程中的一些重要指标以及这些指标对动态异构冗余构造带来的收益,提出一种多变量负反馈调度算法。通过对多种因素的量化及计算,并在调度过程中对执行体组的状态进行监控,实现执行体数量根据执行体组情况的动态调整。实验结果表明,执行体数量可动态调整提高了动态异构冗余构造的动态性,保持良好的防御能力的同时具有更高的运行效率。Mimic defense technology aims to create a secure and dependable system that addresses the issue of asymmetric attack and defense in cyberspace.As an important part of the mimic defense,one of the key problems of the scheduling module is the quantification of the heterogeneous executor.The current research on the indicators of the heterogeneous executor cannot fully achieve quantification,and most scheduling algorithms fix the number of execution entities,which impacts security,dynamic ability,and operational efficiency.Combined with the characteristics of the scheduling algorithm,this paper analyzes some significant indicators in the process of heterogeneous executor quantification and the benefits of these indicators on the construction of dynamic heterogeneous executor and proposes a multivariate dynamic scheduling algorithm for the heterogeneous executor.By quantifying and calculating various factors and monitoring the status of the executive body group during the scheduling process,the number of executive bodies can be dynamically adjusted acording to the situation of the executor group,and verified by simulation experiments.The experiment demonstrates that the number of executors can be dynamically adjusted to improve the dynamic nature of dynamic heterogeneous redundancy construction,maintain good defense capability and have higher operational efficiency.

关 键 词：网络空间安全 内生安全 拟态防御 动态异构冗余 量化算法 调度算法 执行体数量 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]