基于异构冗余架构的拟态防御建模技术

doi:10.11959/j.issn.1000-0801.2020143

Telecommunications Science ›› 2020, Vol. 36 ›› Issue (5): 31-38.doi: 10.11959/j.issn.1000-0801.2020143

• Topic: Intelligent and Highly Confrontational Development of Network Security • Previous Articles Next Articles

Modeling of the mimic defense based on heterogeneous redundancy

Junning QIN¹,Jiajia HAN²,Sheng ZHOU³,Chunming WU⁴,Shuangxi CHEN^4,⁵(),Ruoyan ZHAO⁴,Jiangyu ZHANG⁴

¹ Zhejiang Huayun Info Technology Co.,Ltd.,Hangzhou 310027,China
² State Grid Zhejiang Electric Power Co.,Ltd.Research Institute,Hangzhou 310027,China
³ State Grid Zhejiang Electric Power Co.,Ltd.,Hangzhou 310027,China
⁴ Zhejiang University,Hangzhou 310058,China
⁵ Jiaxing Vocational and Technical College,Jiaxing 314036,China

Revised:2020-04-25 Online:2020-05-20 Published:2020-05-18
Supported by:
The Science and Technology Funding Project of State Grid(52110118001F)

Abstract

Abstract:

The unbalanced development status of network security was introduced.The main hazards and the mechanism model of penetration testing were described,and the inherent shortcomings of many existing traditional defense methods were analyzed.However,new method of the mimic defense model makes the attack information obtained invalid by dynamically selecting the executive set and adaptively changing the system composition.The same attack mode is difficult to be maintained or reproduced.Based on the attack chain model,the traditional defensetechnology and mimic defense technology were analyzed and compared,and it was demonstrated that it had a protective role in multiple stages of the attack chain.Finally,the effectiveness and superiority of the mimic defense was verified by experiments,and the model was summarized and prospected.

Key words: traditional defense, unbalanced situation, penetration test, heterogeneous redundancy, mimic defense

CLC Number:

TP393

Junning QIN,Jiajia HAN,Sheng ZHOU,Chunming WU,Shuangxi CHEN,Ruoyan ZHAO,Jiangyu ZHANG. Modeling of the mimic defense based on heterogeneous redundancy[J]. Telecommunications Science, 2020, 36(5): 31-38.

Figures/Tables 11

References 13

[1]	SUBRAHMANIAN V S , OVEKGONN M , DUMITRAS T ,et al. The global cyber-vulnerability report[J]. Springer Int’l Publishing, 2015(10): 33-64.
[2]	China Information Technology Security Evaluation Center. China national vulnerability database of information security[EB]. 2015.
[3]	XU H , CHEN X , ZHOU J ,et al. Research on basic problems of cognitive network intrusion prevention[C]// Proceedings of 9th International Conference on Computational Intelligence and Security (CIS). Piscataway:IEEE Press, 2013: 514-517.
[4]	CHUNG C J , KHATKAR P , XING T ,et al. NICE:network intrusion detection and countermeasure selection in virtual network systems[J]. IEEE Transaction on Dependable and Secure Computing, 2013,10(4): 198-211.
[5]	MADA B B , GOSEVAP K , VAIDYANATHAN K ,et al. A method for modeling and quantifying the security attributes of intrusion tolerant systems[J]. Performance Evaluation, 2004,56(14): 167-186.
[6]	WU J X . Research on cyberspace mimic defense[J]. Journal of Information Security, 2016,1(4): 1-10.
[7]	仝青, 张铮, 张为华 ,等. 拟态防御 Web 服务器设计与实现[J]. 软件学报, 2017,28(4): 883-897.
	TONG Q , ZHANG Z , ZHANG W H ,et al. Design and implementation of mimic defense Web server[J]. Journal of Software, 2017(4): 883-897.
[8]	邬江兴 . 拟态计算与拟态安全防御的原意和愿景[J]. 电信科学, 2014,30(7): 2-7.
	WU J X . The original intention and vision of mimic computing and mimic security defense[J]. Telecommunications Science, 2014,30(7): 2-7.
[9]	National Science and Technology Council. Trustworthy cyberspace:strategic plan for the federal cybersecurity research and development program[EB]. 2011.
[10]	邬江兴 . 网络空间拟态防御原理[M]. 北京: 科学出版社, 2018: 317-367.
	WU J X . Cyber mimic defense[M]. Beijing: Science PressPress, 2018: 317-367.
[11]	VOAS J , GHOSH A , CHARRON F ,et al. Reducing uncertainty about common-mode failures[C]// Proceedings of IEEE Symposium on Software Reliability Engineering (SRE’ 97). Piscataway:IEEE Press, 1997: 308-319.
[12]	LECITIN G . Optimal structure of fault-tolerant software systems[J]. Reliability Engineering ＆ System Safety, 2005,8(3): 286-295.
[13]	LIU C , LI C Q , QIU G W . Research on intruder countermeasures based on CobaltStrike and office vulnerabilities[J]. Cyberspace Security, 2018(1): 56-61.

Metrics

Recommended 0

No Suggested Reading articles found!

名称	用途	内存	处理器	硬盘	系统
node1	执行体	2 GB	Intel? Core? i5-6300HQ CPU @ 2.30 GHz	20 GB	Ubuntu16.04.6
node2	执行体	1 GB		20 GB	CentOS7
node3	负载均衡服务器	1 GB		20 GB	CentOS7
node4	执行体	2 GB		60 GB	Windows2012
Windows10	攻击节点	8 GB		1 TB	Windows10

实验环境	样本数量	平均值	最小值	异常	吞吐量	接收	发送
未开启拟态防御	6 000	353	8	33.18%	10.0个/s	19.01 KB/s	2.15 KB/s
开启拟态防御	6 000	2 124	7	22.43%	10.0个/s	20.79 KB/s	2.25 KB/s

Modeling of the mimic defense based on heterogeneous redundancy

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 13

Related Articles 5

Metrics

Recommended 0

[1]	Chuanhuang LI, Jingjing TANG, Yangting CHEN, Rui LEI, Chao CHEN, Weiming WANG. Dynamic scheduling method of service function chain executors based on the mimic defense architecture [J]. Telecommunications Science, 2022, 38(4): 101-112.
[2]	Ruyun ZHANG, Heyuan LI, Shunbin LI. Mimic security scheduling algorithm for industrial control under limited heterogeneous resource constraints [J]. Telecommunications Science, 2021, 37(3): 57-65.
[3]	Liyue CHEN,Xin SUN,Tiansheng CHENG,Chunming WU,Shuangxi CHEN. Defense of hidden backdoor technology for Web [J]. Telecommunications Science, 2020, 36(5): 39-46.
[4]	Ming GAO,Jin LUO,Huiying ZHOU,Hai JIAO,Lili YING. A differential feedback scheduling decision algorithm based on mimic defense [J]. Telecommunications Science, 2020, 36(5): 73-82.
[5]	Xinsheng JI,Hao LIANG,Hongchao HU. New thoughts on security technologies for space-ground integration information network [J]. Telecommunications Science, 2017, 33(12): 24-35.