Mimicry safety system and method based on sampling detection

Abstract

The invention provides a mimicry security system and method based on sampling detection. The mimicry security system comprises an input agent, a redundant controller, at least two heterogeneous function equivalents and an output agent, the redundant controller is used for carrying out parameter comparison on a judgment result of the heterogeneous function equivalence body and informing the outputagent of a judgment result; the heterogeneous function equivalence body is used for selecting and synchronizing sampling data, carrying out feature judgment on the sampling data and sending a judgmentresult to the redundant controller, wherein the mimicry judgment parameters of the heterogeneous function equivalence body are sampling data generated based on the storage data; the method greatly reduces the storage space and computing resources required by the decision parameters, guarantees the timeliness and accuracy of the decision parameters, improves the mimicry decision efficiency in network edge computing scenes such as large-scale data computing, and improves the availability of a mimicry security system.

Description

technical field [0001] The invention relates to the field of network communication, in particular to a mimic security system and method based on sampling detection. Background technique [0002] While cyberspace is developing vigorously, it is facing a severe security situation. There are a large number of malicious attacks against cyberspace. In addition, the network system is complex and inevitably has loopholes. Therefore, cyberspace has both external threats and internal security threats. Vulnerability issues are intertwined, and security risks are severe and complex. In the new cyberspace security situation, traditional defense methods based on prior knowledge are difficult to deal with various attacks. It is necessary to change defense thinking, define new defense boundaries, consolidate the depth of defense, and move from passive to active defense with endogenous security. [0003] Chinese patent CN201610853938.7 "A Device, Method, and Equipment for Encapsulating Het...

AI Technical Summary

Problems solved by technology

[0003] Chinese patent CN201610853938.7 "A Device, Method, and Equipment for Encapsulating Heterogeneous Functional Equivalents" proposes a mimic security defense technology, which can obtain a favorable endogenous defense situation from initiative, variability, and randomness. The environment changes dynamically, which is difficult for attackers to observe and predict, thus greatly increasing the difficulty and cost of attacks including unknown exploitable vulnerabilities and backdoors

[0004] Chinese patent CN201610853938.7 solves the problem of network element security protection very well, but at present, network functions are becoming more and more complex, and there are more and more types of security attacks. For example, in network edge computing, network elements not only have network transmission functions, as well as storage and calculation functions. The data stored by network elements usually exceeds G bytes or even T bytes, and the calculation functions are complicated. If the mimicry judgment function of Chinese patent CN201610853938. In terms of ruling accuracy, it is difficult to meet the actual needs of the network

Images