基于拟态防御技术的API网关安全防护方法  

API Gateway Security Protection Method Based on Mimetic Defense Technology

作　　者：姚俊 YAO Jun(China Telecom Shanghai Branch,Shanghai 200120,China)

机构地区：[1]中国电信股份有限公司上海分公司,上海200120

出　　处：《移动通信》2024年第7期122-126,共5页Mobile Communications

摘　　要：针对当前API网关采用常规防御的方法很难有效防御漏洞、病毒及后门监测所产生的数据安全威胁,提出一种基于拟态防御技术的API网关安全防护方法。首先,在网关通过构建基于熵的异构度和内外安全度计算执行体裁决指标;其次,结合随机调度机制实现可信执行体选择;最后,通过反馈机制实现可信执行体动态调整,从而达到安全防御的闭环并不依赖任何执行条件实现系统的自适应防御。实验表明,所提算法相对于基于优先级调度算法的优势,具有一定的实用性。Given the challenges posed by conventional defense methods in effectively protecting API gateways from vulnerabilities,viruses, and backdoor threats, we propose an API gateway security method based on mimetic defense technology.Initially, the gateway constructs decision metrics for executors using entropy-based heterogeneity and internal-externalsecurity evaluations. Next, a randomized scheduling mechanism is employed to select trusted executors. Finally, afeedback mechanism dynamically adjusts the trusted executors, achieving a closed-loop security defense that adapts tothreats without relying on any predetermined execution conditions. Experimental results demonstrate that the proposedalgorithm offers practical advantages over priority-based scheduling algorithms.

关 键 词：拟态防御 数据安全 API网关 动态调度 

分 类 号：TN929.5[电子电信—通信与信息系统]