Electric power Web application mimicry defense system

Abstract

The invention discloses an electric power Web application mimicry defense system. The system comprises an information fragment randomized transmission module, a request distribution balancing module,a response redundancy voter, a non-similar Web virtual machine pool, a dynamic executor scheduler and a database instruction isomerization module; the dynamic executor scheduler is used for controlling the state of each Web service executor; the information fragment randomized transmission module fragments and randomizes Web service requests; and the request distribution balancing module dynamically distributes each Web service request to a plurality of heterogeneous redundant Web service executors, processes the same Web service request in a non-cooperative manner, and returns response information to the response redundancy voter for voting. According to the electric power Web application mimicry defense system, the uncertainty of the system is increased, the vulnerability utilization feasibility on which attacks depend is destroyed, and the probability that the system is successfully attacked is reduced; through the design of a voting mechanism, abnormal feedback information of attacks is detected and filtered, so that the system is prevented from being threatened by unknown vulnerabilities.

Description

technical field [0001] The invention belongs to the field of electric power information security, and in particular relates to a power web application mimic defense system. Background technique [0002] With the popularization of electric power information systems and the continuous accumulation of data, electric power production, scheduling, and marketing are increasingly dependent on information systems, and more and more Web application systems based on B / S architecture have been built and put into use. Accompanied by this, the attack methods based on the application layer show an explosive growth trend and are constantly being updated, which brings serious hidden dangers to the security of the business system. The main risks of the power enterprise Web application system come from the loopholes and flaws in the operating system and the system itself. Attackers can use these loopholes and flaws to attack the application system. The current major Web application security l...

AI Technical Summary

Problems solved by technology

[0003] Currently widely used or deployed in the firewall, security gateway, intrusion detection system, virus killing, user authentication, access control and other technologies or equipment of the State Grid Corporation of China and its affiliated power companies to improve the network security defense system of system security, its essence is A passive security protection system based on prior knowledge (including characteristics, behaviors, fingerprints, etc. of known attackers), which has genetic defects in dealing with uncertain threats, has only "acquired immunity" and can only "non-stop Find loopholes and keep patching", "keep losing sheep, keep patching up", there is no effective way to detect and prevent pre-installed backdoors, and it is impossible to defend against unknown attacks of unknown vulnerabilities and unknown backdoors

Under the situation that network attacks tend to be automated, intelligent, combined, and software and hardware synergy, the above-mentioned traditional passive defense system is more difficult to effectively resist attacks using unknown vulnerabilities, and it is difficult to defend against potential attacks using various unknown backdoors

Under such circumstances, the State Grid Corporation of China has a serious attack-defense asymmetry of "easy to attack and difficult to defend". application security

Images