网络与信息安全学报 ›› 2021, Vol. 7 ›› Issue (3): 95-104.doi: 10.11959/j.issn.2096-109x.2021063

• 专栏Ⅱ:SDN与云计算安全 • 上一篇    

容器云中基于Stackelberg博弈的动态异构调度方法

曾威, 扈红超, 李凌书, 霍树民   

  1. 信息工程大学,河南 郑州 450001
  • 修回日期:2021-04-23 出版日期:2021-06-01 发布日期:2021-06-01
  • 作者简介:曾威(1997- ),男,河南信阳人,信息工程大学硕士生,主要研究方向为移动目标防御和拟态安全防御
    扈红超(1982- ),男,河南商丘人,信息工程大学研究员,主要研究方向为云计算和网络安全
    李凌书(1992- ),男,湖北恩施人,信息工程大学博士生,主要研究方向为拟态安全防御和网络欺骗
    霍树民(1985- ),男,山西长治人,信息工程大学副研究员,主要研究方向为网络空间安全和人工智能安全
  • 基金资助:
    国家重点研发计划(2018YFB0804004);国家自然科学基金(62002383)

Dynamic heterogeneous scheduling method based on Stackelberg game model in container cloud

Wei ZENG, Hongchao HU, Lingshu LI, Shumin HUO   

  1. Information Engineering University, Zhengzhou 450001, China
  • Revised:2021-04-23 Online:2021-06-01 Published:2021-06-01
  • Supported by:
    The National Key R&D Program of China(2018YFB0804004);The National Natural Science Foundation of China(62002383)

摘要:

容器技术以其灵活、高效的特性促进了云计算的快速发展,但同时引入了如同驻攻击、逃逸攻击和共模攻击等安全威胁。针对这些安全威胁,提出一种容器云中基于 Stackelberg 博弈的动态异构式调度方法。首先,构建异构镜像资源池以抑制云上基于共模漏洞的攻击扩散;进而,将攻防交互过程建模为Stackelberg博弈模型;最后,对攻防模型进行分析,将系统调度问题建模为混合整数非线性规划问题以求解系统最优调度策略。实验证明,所提方法能够提升云平台的防御效果,降低系统防御开销。

关键词: 云安全, 容器调度, Stackelberg博弈, 移动目标防御

Abstract:

Container technology promotes the rapid development of cloud computing with its flexible and efficient features, but it also introduces security threats such as co-resident attacks, escape attacks, and common mode attacks.In response to these security threats, a dynamic heterogeneous scheduling method based on Stackelberg game in the container cloud was proposed.First, a heterogeneous mirrored resource pool is constructed to suppress the spread of attacks based on common-mode vulnerabilities on the cloud.Then, the offensive and defense interaction process is modeled as a Stackelberg game model.Finally, the offensive and defensive model is analyzed, and the system scheduling problem is modeled as a mixed integer non-linear programming problem to solve the system's optimal scheduling strategy.Experiments show that the proposed method can improve the defense effect of the cloud platform and reduce the system defense overhead.

Key words: cloud security, container scheduling, Stackelberg game, moving target defense

No Suggested Reading articles found!