基于Docker容器的航天网络隐私数据安全防护控制研究  

Research on Security Protection and Control of Aerospace NetworkPrivacy Data Based on Docker Container

作　　者：全斌 QUAN Bin(China Aerospace Academy of Systems Science and Engineering,Beijing 100037,China)

机构地区：[1]中国航天系统科学与工程研究院,北京100037

出　　处：《计算机测量与控制》2024年第5期201-207,214,共8页Computer Measurement &Control

摘　　要：隐私数据嵌入量过大会导致航天网络主机信息参量提取时间延长,数据安全性下降,所以研究基于Docker容器的航天网络隐私数据安全防护控制方法;利用Docker容器收集航天网络负载数据,评估Docker容器实时负载量,联合目标防护信息实现对航天网络Docker容器的调度;根据Docker容器调度和Paillier同态加密结果,提取静态污点后完成航天网络隐私数据的训练与处理;根据所得到的数据,定义混沌映射关系,通过离散变换的方式生成安全性种子密钥,结合安全防护控制函数求解结果实现航天网络隐私数据安全防护控制;实验结果表明,所提方法能够将隐私数据实时嵌入量控制在5.5 GB以下,保证网络主机提取信息参量的时间不超过0.7 ms,能够有效保证航天网络隐私数据安全性。The excessive embedding of privacy data can lead to prolong the extraction time of host information parameters in aerospace networks and decrease in data security.Therefore,a privacy data security protection control method for aerospace networks based on Docker container is studied.The Docker container is used to collect aerospace network load data,evaluate the real-time load of Docker container,and schedule the Docker container of aerospace networks in conjunction with target protection information.According to the Docker container scheduling and Paillier homomorphic encryption results,it extracts the static stains,and then,trains and processes aerospace network privacy data.Based on the obtained data,the chaotic mapping relationship is defined to generate the security seed key through the discrete transformation,and the solution of the security protection control function is combined to achieve the security protection control of aerospace network privacy data.The experimental results show that the proposed method can control the real-time embedding amount of privacy data to below 5.5 GB,ensuring that the time for network host to extract information parameters does not exceed 0.7 ms,and it effectively ensures the security of aerospace network privacy data.

关 键 词：Docker容器 航天网络 隐私数据 安全防护 负载数据 同态加密 静态污点 混沌映射 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]