A scenario-based method for dynamic scheduling of heterogeneous executives in mimetic web servers

Abstract

The invention provides a scenario-based method for dynamic scheduling of heterogeneous executive bodies of mimetic web servers. The method includes: calculating the overall difference value between the offline execution body and the online execution body; counting the type set L of the attacker and the attack method strategy set N of the attacker l in the target scene l , get the attack probability table P of various types of attackers A ={p 1 ,p 2 ,...,p l}; Calculate the income value A of the attacking and defending parties under various attack methods when the attacker l launches an attack on any executive body l and D l ; The Bayesian-Stackelberg game model is mapped to the mimic web server, and the objective function used to solve the optimal scheduling strategy is constructed; l and D l into the objective function to obtain the defender's optimal mixed strategy x. By constructing the objective function, the dynamic scheduling strategy of the mimic web server under different attack environments can be obtained, which can give full play to the diversity, randomness and dynamic advantages of the mimic defense, and effectively improve the security and resource utilization of the system.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a scenario-based method for dynamic scheduling of heterogeneous executive bodies of mimetic web servers. Background technique [0002] As the most important way of carrying and providing Internet services at present, web services are the starting point of most network attacks. The existence of vulnerabilities allows some people or groups to obtain important information with a small amount of resources, threatening the security of information infrastructure and public services. It even endangers network order and social stability. [0003] Mimic defense deploys heterogeneous software and hardware executives with the same function at different levels in web services, uses multiple heterogeneous executives to execute the same request and votes on the response results, and dynamically schedules executives through the feedback results of threat perception to increase security...

AI Technical Summary

Problems solved by technology

Although this strategy can effectively realize the dynamic and random changes of the executive body, it cannot fully guarantee the diversity among the executive bodies, which is not conducive to the effective use of the mimic voting mechanism.

The above two strategies work well in an environment where the attack intensity of a single attack method is not high, but in the face of advanced persistent threats or coordinated attacks, it is easy for the attacker to figure out the rotation law, resulting in a decrease in system security

Images