首页 | 官方网站   微博 | 高级检索  
     

基于演化博弈的NFV拟态防御架构动态调度策略
引用本文:张青青,汤红波,游伟,普黎明. 基于演化博弈的NFV拟态防御架构动态调度策略[J]. 计算机工程, 2022, 48(4): 30-38+49. DOI: 10.19678/j.issn.1000-3428.0061282
作者姓名:张青青  汤红波  游伟  普黎明
作者单位:中国人民解放军战略支援部队信息工程大学 国家数字交换系统工程技术研究中心, 郑州 450002
基金项目:国家自然科学基金(61941114,61521003,61801515);
摘    要:构建网络功能虚拟化(NFV)拟态防御架构能够打破防御滞后于攻击的攻防不对等格局,其中动态调度策略是关键实现技术。然而,现有拟态防御架构中的动态调度策略大多根据执行体自身固有的特点进行调度,没有进一步利用裁决机制对异常执行体的定位感知能力做优化调整。通过引入演化博弈理论,设计一种新的NFV拟态防御架构动态调度策略。在NFV拟态防御架构中增加一个分析器,用于对历史裁决信息进行分析研究。根据分析器中得到的反馈信息,从攻防双方的有限理性出发构建多状态动态调度演化博弈模型,并采用复制动态方程求解该博弈模型的演化均衡策略,利用李雅普诺夫间接法对均衡策略进行稳定性分析,提出基于演化博弈的动态调度策略选取算法。仿真结果表明,该策略能够利用裁决机制对异常执行体的定位感知能力,通过深入分析研究和不断调整优化选择具有适应性和针对性的调度策略,有效提升系统的安全收益和防御效能。

关 键 词:网络功能虚拟化  拟态防御  动态调度  演化博弈  裁决机制  
收稿时间:2021-03-25
修稿时间:2021-04-29

Dynamic Scheduling Strategy of NFV Mimic Defense Architecture Based on Evolutionary Game
ZHANG Qingqing,TANG Hongbo,YOU Wei,PU Liming. Dynamic Scheduling Strategy of NFV Mimic Defense Architecture Based on Evolutionary Game[J]. Computer Engineering, 2022, 48(4): 30-38+49. DOI: 10.19678/j.issn.1000-3428.0061282
Authors:ZHANG Qingqing  TANG Hongbo  YOU Wei  PU Liming
Affiliation:National Digital Switching System Engineering & Research Center, People's Liberation Army Strategic Support Force Information Engineering University, Zhengzhou 450002, China
Abstract:Constructing a Network Functions Virtualization(NFV) mimic defense architecture can break the unequal pattern of attack and defense with defense lagging behind attack, where the key implementation technology is the dynamic scheduling strategy.However, most dynamic scheduling strategies in the existing mimic defense architecture schedule according to the inherent characteristics of the executor, and do not further use the adjudication mechanism to optimize and adjust the location perception ability of the abnormal executor.To address this problem, this paper proposes a new dynamic scheduling strategy for the NFV mimic defense architecture by introducing evolutionary game theory.First, an analyzer is added to the NFV mimic defense architecture to analyze and research historical arbitration information.Second, based on the feedback information obtained from the analyzer, a multi-state dynamic scheduling evolutionary game model is built based on the bounded rationality of both offense and defense, using the replication dynamic equation to solve the evolutionary equilibrium strategy, and Lyapunov's indirect method to analyze the stability of the equilibrium strategy.Finally, an optimal dynamic scheduling strategy selection algorithm, based on evolutionary game theory, is proposed.The simulation results show that the method proposed in this paper can effectively use the arbitration mechanism ability to locate and perceive abnormal executive bodies.Through in-depth analysis and continuous optimization, an adaptive and targeted scheduling strategy is selected to further enhance the security benefits and defense effectiveness of the system.
Keywords:Network Functions Virtualization(NFV)  mimic defense  dynamic scheduling  evolutionary game  arbitration mechanism  
点击此处可从《计算机工程》浏览原始摘要信息
点击此处可从《计算机工程》下载全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司    京ICP备09084417号-23

京公网安备 11010802026262号