生物免疫启发下的一种内生安全技术框架

doi:10.11959/j.issn.1000-0801.2021051

电信科学 ›› 2021, Vol. 37 ›› Issue (3): 49-56.doi: 10.11959/j.issn.1000-0801.2021051

生物免疫启发下的一种内生安全技术框架

李玉峰¹^,², 曹晨红¹^,², 李江涛¹^,², 王鹏²^,³

¹ 上海大学，上海 200444
² 网络通信与安全紫金山实验室，江苏南京 211100
³ 中原工学院，河南郑州 451191

修回日期:2021-03-15 出版日期:2021-03-20 发布日期:2021-03-01
作者简介:李玉峰（1975- ），男，上海大学教授、博士生导师，主要研究方向为网络信息安全管控、智能系统网络安全、宽带网络等。
曹晨红（1991- ），女，博士，上海大学计算机学院讲师，主要研究方向为网络测量与安全、物联网系统与网络、智能感知技术。
李江涛（1990- ），男，博士，上海大学计算机学院讲师，主要研究方向为公钥密码学、车载网安全与隐私保护。
王鹏（1985- ），男，博士，中原工学院前沿信息技术研究院讲师，主要研究方向为智能系统安全、新型网络与通信安全。

An endogenous safety and security technical framework inspired by biological immune system

Yufeng LI¹^,², Chenhong CAO¹^,², Jiangtao LI¹^,², Peng WANG²^,³

¹ School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China
² Purple Mountain Laboratories, Nanjing 211100, China
³ Zhongyuan University of Technology, Zhengzhou 451191, China

Revised:2021-03-15 Online:2021-03-20 Published:2021-03-01

摘要/Abstract

摘要：

内生安全是网络安全领域的新兴概念与技术方向。受生物免疫机制体现出的内生性安全效应启发，提出了一种内生安全技术框架，剖析了该框架的主要技术挑战，给出了对应的解决方案，分析了该框架的应用场景。分析发现，该框架具有较高的鲁棒性、自主性和自适应性，且具有很强的实用性。

关键词: 内生安全, 免疫系统, DHR构造

Abstract:

Inspired by the endogenous safety and security effect of biological immune mechanism, an endogenous safety and security technology framework was proposed, the main technical challenges of the framework were analyzed, the corresponding solutions were given, and the application scenarios of the framework were analyzed.Comprehensive analysis shows that the framework presents high robustness, autonomy and adaptability, and has strong practicability.

Key words: endogenous safety and security, immune system, DHR structure

中图分类号:

TP393

李玉峰, 曹晨红, 李江涛, 王鹏. 生物免疫启发下的一种内生安全技术框架[J]. 电信科学, 2021, 37(3): 49-56.

Yufeng LI, Chenhong CAO, Jiangtao LI, Peng WANG. An endogenous safety and security technical framework inspired by biological immune system[J]. Telecommunications Science, 2021, 37(3): 49-56.

图/表 2

参考文献 30

[1]	邬江兴 . 鲁棒控制与内生安全[J]. 网信军民融合, 2018(3): 23-27.
	WU J X . Robust control and endogenous safety[J]. Civil-Military Integration on Cyberspace, 2018(3): 23-27.
[2]	科学网. 拟态防御或助网络安全实现再平衡[EB]. 2016.
	ScienceNet. Mimic defense may help rebalance network security[EB]. 2016.
[3]	网络空间拟态防御原理——广义鲁棒控制与内生安全（第二版）上册[J]. 北京: 科学出版社, 2018.
	Principles of mimic defense in cyberspace——generalized robust control and endogenous security (second edition) volume One[J]. Beijing: Science Press, 2018.
[4]	WU J X . Cyberspace mimic defense - generalized robust control and endogenous security[M]. Switzerland: Springer International Publishing, 2020.
[5]	齐向东 . 网络安全已进化到“内生安全”时代[EB]. 2019.
	QI X D . Network security has evolved into the era of “endogenous security”[EB]. 2019.
[6]	齐向东 . 网络安全形势有三大转变[EB]. 2019.
	QI X D . There are three major changes in the cyber security situation[EB]. 2019.
[7]	FORREST S , PERELSON A S , ALLEN L ,et al. Self-nonself discrimination in a computer[C]// Proceedings of 1994 IEEE computer society symposium on research in security and privacy. Piscataway:IEEE Press, 1994: 202-212.
[8]	KEPHART J O , . A biologically inspired immune system for computers[C]// Proceedings of the Fourth International Workshop on Synthesis and Simulation of Living Systems,Artificial Life IV:Citeseer.[S.l.:s.n.], 1994.
[9]	DASGUPTA D . Artificial immune systems and their applications[M]. Heidelberg Springer Science ＆ Business Media, 2012.
[10]	LAMONT G B , MARMELSTEIN R E , VAN VELDHUIZEN D A . A distributedarchitecture for a self-adaptive computer virus immune system[M]. New ideas in optimization.[S.l.:s.n.], 1999: 167-184.
[11]	KEPHART J , SORKIN G , SWIMMER M ,et al. Blueprint for a computer immune system[C]// Artificial immune systems and their applications. 1999: 242-261.
[12]	FORREST S , HOFMEYR S A , SOMAYAJI A . Computer immunology[J]. Communications of the ACM, 1997,40(10): 88-96.
[13]	DASGUPTA D , . Immunity-based intrusion detection systems:A general frame- work[C]// Proceedings of the 22nd National Information Systems Security Conference.[S.l.:s.n.], 1999: 18-21.
[14]	HARMER P K , WILLIAMS P D , GUNSCH G H ,et al. An artificial immune system architecture for computer security applications[J]. IEEE transactions on evolutionary computation, 2002,6(3): 252-280.
[15]	MTHUNZI S N , BENKHELIFA E , BOSAKOWSKI T ,et al. A bio-inspired approach to cyber security[C]// Proceedings of Machine Learning for Computer and Cyber Security:Principle,Algorithms,and Practices. Boca Raton:CRC Press, 2019:75.
[16]	WLODARCZAK P , . Cyber immunity[C]// International Conference on Bioinformatics and Biomedical Engineering. Heidelberg:Springer, 2017: 199-208.
[17]	RAUF U . A taxonomy of bio-inspired cyber security approaches:existing techniques and future directions[J]. Arabian Journal for Science and Engineering, 2018,43(12): 6693-6708.
[18]	FERNANDES D A , FREIRE M M , FAZENDEIRO P A ,et al. Applications of artificial immune systems to computer security:A survey[J]. Journal of Information Security and Applications, 2017,35: 138-159.
[19]	BECK G , HABICHT G S . Immunity and the invertebrates[J]. Scientific American, 1996,275(5): 60-66.
[20]	GENE M . Innate or non-specific immunity[EB]. 2006.
[21]	PANCER Z , COOPER M D . The evolution of adaptive immunity[J]. ANNU REV IMMUNOL, 2006(24): 497-518.
[22]	MEIRA J , ANDRADE R,PRA?A I ,et al. Performance evaluation of unsupervised techniques in cyber-attack anomaly detection[J]. Journal of Ambient Intelligence and Humanized Computing, 2020,11(11): 4477-4489.
[23]	DUESSEL P , GEHL C , FLEGEL U ,et al. Detecting zero-day attacks using context-aware anomaly detection at the application-layer[J]. International Journal of Information Security, 2017,16(5): 475-490.
[24]	SABEEL U , HEYDARI S S , MOHANKA H ,et al. Evaluation of deep learning in detecting unknown network attacks[C]// Proceedings of 2019 International Conference on Smart Applications,Communications and Networking (SmartNets). Piscataway:IEEE Press, 2019: 1-6.
[25]	MAHAJAN V , PEDDOJU S K . Integration of network intrusion detection systems and honeypot networks for cloud security[C]// Proceedings of 2017 International Conference onComputing,Communication and Automation (ICCCA). Piscataway:IEEE Press, 2017: 829-834.
[26]	YU Y H , YU F , WU X P . Unknown attack detection model based on network behavior analysis[J]. Chinese Journal of Network and Information Security, 2016,2(6): 54.
[27]	MAUGHAN D , NEWHOUSE W D , VAGOUN T . Introducing the federal cyber- security r＆d strategic plan[J]. 2012.
[28]	卿昱 . 动态目标防御—为应对赛博威胁构建非对称的不确定性[M]. 北京: 国防工业出版社, 2014.
	QING Y . Dynamic target defense—constructing asymmetric uncertainty in response to cyber threats[M]. Beijing: National Defense Industry Press, 2014.
[29]	扈红超, 陈福才, 王禛鹏 . 拟态防御 DHR 模型若干问题探讨和性能评估[J]. 信息安全学报, 2016,1(4): 40-51.
	HU H C , CHEN F C , WANG Z P . Discussion on several issues and performance evaluation of mimic defense DHR model[J]. Journal of Cyber Security, 2016,1(4): 40-51.
[30]	刘建侯 . 功能安全技术基础[M]. 北京: 机械工业出版社, 2008.
	LIU J H . Fundamentals of functional safety technology[M]. Beijing: Machinery Industry Press, 2008.

生物免疫启发下的一种内生安全技术框架

An endogenous safety and security technical framework inspired by biological immune system

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 2

参考文献 30

相关文章 11

Metrics

推荐阅读 0

[1]	张帆, 谢光伟, 郭威, 扈红超, 张汝云, 刘文彦. 基于拟态架构的内生安全云数据中心关键技术和实现方法[J]. 电信科学, 2021, 37(3): 39-48.
[2]	张汝云, 李合元, 李顺斌. 有限异构资源条件下的工业控制拟态调度算法[J]. 电信科学, 2021, 37(3): 57-65.
[3]	朱泓艺, 陆肖元, 李毅. 网络空间内生安全试验场管理技术[J]. 电信科学, 2021, 37(3): 66-74.
[4]	陈哲,蒋胜,王闯. 面向智能工业物联的灵活地址可信协议架构[J]. 电信科学, 2020, 36(7): 26-33.
[5]	涂哲,周华春,李坤,王玮琳. 信息网络内生恶意行为检测框架[J]. 电信科学, 2020, 36(10): 37-45.
[6]	刘杨,彭木根. 6G内生安全：体系结构与关键技术[J]. 电信科学, 2020, 36(1): 11-20.
[7]	聂凯君,曹傧,彭木根. 6G内生安全：区块链技术[J]. 电信科学, 2020, 36(1): 21-27.
[8]	郑秀丽, 蒋胜, 王闯. NewIP：开拓未来数据网络的新连接和新能力[J]. 电信科学, 2019, 35(9): 2-11.
[9]	江伟玉, 刘冰洋, 王闯. 内生安全网络架构[J]. 电信科学, 2019, 35(9): 20-28.
[10]	郑秀丽, 谭佳瑶, 蒋胜, 王闯. 未来数据网络需求分析[J]. 电信科学, 2019, 35(8): 16-25.
[11]	季新生,梁浩,扈红超. 天地一体化信息网络安全防护技术的新思考[J]. 电信科学, 2017, 33(12): 24-35.