Scenario-based dynamic scheduling method for heterogeneous execution of mimic web server

Abstract

The invention provides a scenario-based dynamic scheduling method for the heterogeneous execution of a mimic web server. The method comprises the following steps of: calculating an overall differencevalue between an offline actuator and an offline actuator; The attack probability table PA= {p1, p2,..., pl} of each type of attacker is obtained by counting the type set L of attacker and the attackmode policy set Nl of attacker l in the target scenario. The attack probability table PA= {p1, p2,..., pl} of each type of attacker is obtained. When attacker l launches an attack against any executor, the profit values Al and Dl of the attacker and the defender under various attack modes are calculated. The Stackelberg game model is mapped to a pseudo-web server to construct an objective functionfor solving the optimal scheduling policy. The overall difference value and the revenue values Al and Dl of the offensive and defensive sides are brought into the objective function to obtain the defender's optimal mixed strategy x. By constructing the objective function, we can get the dynamic scheduling strategy of pseudo-web server under different attack environments, which can give full playto the diversity, randomness and dynamic advantages of pseudo-web server, and effectively improve the security and resource utilization of the system.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a scenario-based method for dynamic scheduling of heterogeneous executive bodies of mimetic web servers. Background technique [0002] As the most important way of carrying and providing Internet services at present, web services are the starting point of most network attacks. The existence of vulnerabilities allows some people or groups to obtain important information with a small amount of resources, threatening the security of information infrastructure and public services. It even endangers network order and social stability. [0003] Mimic defense deploys heterogeneous software and hardware executives with the same function at different levels in web services, uses multiple heterogeneous executives to execute the same request and votes on the response results, and dynamically schedules executives through the feedback results of threat perception to increase security...

AI Technical Summary

Problems solved by technology

Although this strategy can effectively realize the dynamic and random changes of the executive body, it cannot fully guarantee the diversity among the executive bodies, which is not conducive to the effective use of the mimic voting mechanism.

The above two strategies work well in an environment where the attack intensity of a single attack method is not high, but in the face of advanced persistent threats or coordinated attacks, it is easy for the attacker to figure out the rotation law, resulting in a decrease in system security

Images