Publishing Service

Polishing & Checking

Frontiers of Information Technology & Electronic Engineering

ISSN 2095-9184 (print), ISSN 2095-9230 (online)

Output difference feedback and system benefit control based dynamic heterogeneous redundancy architecture

Abstract: Mimic active defense technology effectively disrupts attack routes and reduces the probability of successful attacks by using a dynamic heterogeneous redundancy (DHR) architecture. However, current approaches often overlook the adaptability of the adjudication mechanism in complex and variable network environments, focusing primarily on system security while neglecting performance considerations. To address these limitations, we propose an output difference feedback and system benefit control based DHR architecture. This architecture introduces an adjudication mechanism based on output difference feedback, which enhances adaptability by considering the impact of each executor’s output deviation on the global decision. Additionally, the architecture incorporates a scheduling strategy based on system benefit, which models the quality of service and switching overhead as a bi-objective optimization problem, balancing security with reduced computational costs and system overhead. Simulation results demonstrate that our architecture improves adaptability towards different network environments and effectively reduces both the attack success rate and average failure rate.

Key words: Mimic defense; Adjudication mechanism; Scheduling strategy; Executor output difference; System benefit

Chinese Summary  <5> 基于输出差异反馈和系统效益控制的动态异构冗余架构

邵思思1,7,贺之博2,刘尚东3,7,8,张伟丽4,吴飞6,7,8,曾福康3,7
左军3,7,周龙飞3,7,牛玉坤5,季一木3,5,7,8
1南京邮电大学物联网学院,中国南京市,210023
2西交利物浦大学国际商学院,中国苏州市,215123
3南京邮电大学计算机学院,中国南京市,210023
4信息工程大学外国语学院,中国郑州市,450006
5紫金山实验室,中国南京市,211111
6南京邮电大学自动化学院,中国南京市,210023
7南京邮电大学高性能计算与大数据研究所,中国南京市,210003
8中国高性能计算南京分中心,中国南京市,210003
摘要:拟态主动防御技术通过引入动态异构冗余架构来有效扰乱攻击路线,降低攻击成功率。然而,现有方法忽略裁决机制在复杂可变网络环境中的适应性,往往聚焦系统安全性而忽视系统性能。为解决前述局限,本文提出一种基于输出差异反馈和系统效益控制的动态异构冗余架构。该架构引入一种基于输出差异反馈的裁决机制,通过量化各执行体输出偏差对全局裁决结果的影响来增强适应性。此外,该架构结合一种基于系统效益的调度策略,将服务质量和切换开销建模为双目标优化问题,在降低计算成本和系统开销的同时平衡系统安全。仿真结果表明,该架构增强了对不同网络环境的适应能力,有效降低了攻击成功率和平均裁决失败率。

关键词组:拟态防御;裁决机制;调度策略;执行体输出差异;系统效益


Share this article to: More

Go to Contents

References:

<Show All>

Open peer comments: Debate/Discuss/Question/Opinion

<1>

Please provide your name, email address and a comment





DOI:

10.1631/FITEE.2400251

CLC number:

TP393

Download Full Text:

Click Here

Downloaded:

263

Download summary:

<Click Here> 

Downloaded:

216

Clicked:

401

Cited:

0

On-line Access:

2025-06-04

Received:

2024-04-02

Revision Accepted:

2024-10-22

Crosschecked:

2025-09-04

Journal of Zhejiang University-SCIENCE, 38 Zheda Road, Hangzhou 310027, China
Tel: +86-571-87952276; Fax: +86-571-87952331; E-mail: jzus@zju.edu.cn
Copyright © 2000~ Journal of Zhejiang University-SCIENCE