有限异构资源条件下的工业控制拟态调度算法

doi:10.11959/j.issn.1000-0801.2021047

Abstract

Abstract:

Cyberspace mimic defense technology is an effective method to deal with backdoor attacks on unknown vulnerabilities in information systems.Its security is closely related to the number and the heterogeneity of the executors and the scheduling strategy.However, in the field of industrial control, the ecological resources of industrial application are relatively closed, and the number of realizable heterogeneous executors is limited.To solve the above problems, a mimic scheduling algorithm for industrial control under the constraints of limited heterogeneous resources was proposed.The experimental results show that the proposed algorithm for triple-redundancy mimic industrial control system was able to select a suitable executor to go online according to environmental characteristics adaptively.Even in a high-intensity attack environment, it can still maintain a high availability probability of 99.24%.

Key words: mimic defense, endogenous safety and security, resource-constrained model

CLC Number:

TP393

Ruyun ZHANG, Heyuan LI, Shunbin LI. Mimic security scheduling algorithm for industrial control under limited heterogeneous resource constraints[J]. Telecommunications Science, 2021, 37(3): 57-65.

Figures/Tables 7

References 10

[1]	HU H , WU J , WANG Z ,et al. Mimic defense:a designed-in cybersecurity defense framework[J]. IET Information Security, 2017,12(3): 226-237.
[2]	MA B L , ZHANG Z . Security research of redundancy in mimic defense system[C]// Proceedings of 3rd IEEE International Conference on Computer and Communications (ICCC). Piscataway:IEEE Press, 2017: 2910-2914.
[3]	马海龙, 伊鹏, 江逸茗 ,等. 基于动态异构冗余机制的路由器拟态防御体系结构[J]. 信息安全学报, 2017,2(1): 29-42.
	MA H L , YI P , JIANG Y M ,et al. Dynamic heterogeneous redundancy based router architecture with Mimic defenses[J]. 2017,2(1): 29.
[4]	沈丛麒, 陈双喜, 吴春明 . 基于信誉度与相异度的自适应拟态控制器研究[J]. 通信学报, 2018,39(Z2): 173-180.
	SHEN C Q , CHEN S X , WU C M . Adaptive mimic defensive controller framework based on reputation and dissimilarity[J]. Journal on Communications, 2018,39(Z2): 173-180.
[5]	陈利跃, 孙歆, 吴春明 ,等. 一种基于异构度的拟态执行体调度模型研究[C]// 第一届“先进计算与防御技术”会议. 北京:人民邮电出版社, 2018: 494-500.
	CHEN L Y , SUN X , WU C M ,et al. A heterogeneous-based mimic execution scheduling model[C]// Proceedings of the first national conference on advanced computing and defense. Beijing:People’s Posts and Telecom Press, 2018: 494-500.
[6]	魏帅, 于洪, 顾泽宇 ,等. 面向工控领域的拟态安全处理机架构[J]. 信息安全学报, 2017,2(1): 54-73.
	WEI S , YU H , GU Z Y ,et al. Architecture of mimic security processor for industry control system[J]. Journal of Cyber Security, 2017,2(1): 54-73.
[7]	赵长海, 晏海华, 金茂忠 . 基于编译优化和反汇编的程序相似性检测方法[J]. 北京航空航天大学学报, 2008(6): 711-715.
	ZHAO C H , YAN H H , JIN M Z . Approach based on compiling optimization and disassembling to detect program similarity[J]. Journal of Beijing University of Aeronautics and Astronautics, 2008(6): 711-715.
[8]	LIN S , LIU Q , WU Y ,et al. A self-adaptive timeout mechanism in Mimic Defense System[C]// Proceedings of 2017 8th IEEE International Conference on Software Engineering and Service Science (ICSESS). Piscataway:IEEE Press, 2017: 588-591.
[9]	GARCIA M , BESSANI A , GASHI I ,et al. Analysis of OS diversity for intrusion tolerance[J]. Software:Practice and Experience (accepted for publication), 2013.
[10]	邬江兴 . 网络空间内生安全——拟态防御与广义鲁棒控制[M]. 北京: 科学出版社, 2020.
	WU J X . Cyberspace endogenous security:Mimic defense and generalized robust control[M]. Beijing: Science Press, 2020.

Metrics

Recommended 0

No Suggested Reading articles found!

情况	表现形式	安全状态	期望的预期操作
1	“0-0-0”	正常	定时器加1，若定时器超出阈值则随机清洗
2	“1-0-0”“2-0-0”等	差模攻击，可定位故障执行体	清洗输出结果不一致的执行体，恢复到正常状态
3	“1-1-0”“1-1-1”“1-1-2”“0-1-2”等	差模攻击，未能定位故障执行体	清洗输出置信度低于0的执行体，逐次清洗其他受攻击的执行体
4	“0-2-2”“1-2-2”	N-1模攻击	清洗输出结果不一致的执行体，进入“清洗后仍未恢复状态”；然
			后清洗输出结果一致的其中一个执行体，退化到差模攻击状态
5	“2-2-2”	共模攻击	定时器加1，若定时器超出阈值则随机清洗

对象	差模漏洞触发概率P_diff	共模漏洞触发概率P_comm	执行体初始胜任系数
执行体1	0.001/0.002/0.004	1×10^-5/2×10^-5/1×10^-4	0.9
执行体2	0.001/0.002/0.004	5×10^-5/1×10^-4/5×10^-4	0.85
执行体3	0.002/0.004/0.008	5×10^-5/1×10^-4/5×10^-4	0.8
执行体4	0.002/0.004/0.008	1×10^-4/2×10^-4/1×10^-3	0.75
执行体5	0.004/0.008/0.016	1×10^-4/2×10^-4/1×10^-3	0.7
执行体6	0.004/0.008/0.016	5×10^-3/1×10^-2/5×10^-2	0.95
注：该实验参数值仅为评估所提出有限异构资源条件下拟态调度策略安全程度的一组具体系数，读者可以根据实际情况对漏洞概率值进行调整。

攻击强度	执行体1	执行体2	执行体3	执行体4	执行体5	执行体6
高强度攻击	77.91%	76.52%	55.51%	52.72%	29.11%	8.20%
中强度攻击	74.71%	73.62%	55.74%	52.78%	28.35%	14.77%
低强度攻击	72.99%	71.07%	56.68%	52.87%	29.05%	17.31%

攻击强度	平均清洗概率	平均可用概率
高强度攻击	1.52%	99.24%
中强度攻击	0.64%	99.77%
低强度攻击	0.31%	99.87%

Mimic security scheduling algorithm for industrial control under limited heterogeneous resource constraints

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 10

Related Articles 8

Metrics

Recommended 0

[1]	Chuanhuang LI, Jingjing TANG, Yangting CHEN, Rui LEI, Chao CHEN, Weiming WANG. Dynamic scheduling method of service function chain executors based on the mimic defense architecture [J]. Telecommunications Science, 2022, 38(4): 101-112.
[2]	Fan ZHANG, Guangwei XIE, Wei GUO, Hongchao HU, Ruyun ZHANG, Wenyan LIU. Key technologies and implementation methods of endogenous safety and security cloud data center based on mimic architecture [J]. Telecommunications Science, 2021, 37(3): 39-48.
[3]	Yufeng LI, Chenhong CAO, Jiangtao LI, Peng WANG. An endogenous safety and security technical framework inspired by biological immune system [J]. Telecommunications Science, 2021, 37(3): 49-56.
[4]	Hongyi ZHU, Xiaoyuan LU, Yi LI. Management technologies of cyberspace endogenous safety and security test site [J]. Telecommunications Science, 2021, 37(3): 66-74.
[5]	Liyue CHEN,Xin SUN,Tiansheng CHENG,Chunming WU,Shuangxi CHEN. Defense of hidden backdoor technology for Web [J]. Telecommunications Science, 2020, 36(5): 39-46.
[6]	Ming GAO,Jin LUO,Huiying ZHOU,Hai JIAO,Lili YING. A differential feedback scheduling decision algorithm based on mimic defense [J]. Telecommunications Science, 2020, 36(5): 73-82.
[7]	Junning QIN,Jiajia HAN,Sheng ZHOU,Chunming WU,Shuangxi CHEN,Ruoyan ZHAO,Jiangyu ZHANG. Modeling of the mimic defense based on heterogeneous redundancy [J]. Telecommunications Science, 2020, 36(5): 31-38.
[8]	Xinsheng JI,Hao LIANG,Hongchao HU. New thoughts on security technologies for space-ground integration information network [J]. Telecommunications Science, 2017, 33(12): 24-35.