Protocol agent processing method and system based on mimicry defense

Abstract

The invention provides a protocol agent processing method based on mimicry defense. The protocol agent processing method comprises the steps that a protocol receiving and reporting port sends a protocol message to an input agent and an SDK; the SDK acquires second message information related to the protocol receiving and reporting port, extracts the first message information from the protocol message, stores the first message information and the second message information in a one-to-one correspondence manner, and creates a first message information query interface; the input agent copies theprotocol message and distributes the protocol message to a plurality of heterogeneous executors; each heterogeneous execution body acquires second message information from the SDK according to the first message information in the protocol message, and processes the protocol message according to the first message information and the second message information; each heterogeneous executive judges whether the heterogeneous executive is a main executive according to the main executive information issued by the scheduling module, and sends a protocol message processing result to the front-end interface if the heterogeneous executive is the main executive. The invention further provides a protocol agent processing system based on the mimicry defense.

Description

Technical field [0001] The invention relates to the technical field of cyberspace security, in particular to a protocol proxy processing method and system based on mimic defense. Background technique [0002] With the rapid development of networks, more and more security issues in cyberspace are exposed, and traditional passive defenses are often powerless against increasingly complex network security issues. Cyberspace mimic defense technology fundamentally transforms passive defense against unknown problems in unknown environments to active defense. [0003] The mimic defense system is generally composed of input agents, equivalent heterogeneous executors, arbiter, and feedback controller. The input agent completes the copying and distribution of external input information to the heterogeneous executors; the heterogeneous executor executes the externally input information and outputs the results; the arbiter performs multi-mode arbitration on the input results; the feedback cont...

AI Technical Summary

Problems solved by technology

[0005] The present invention aims at the above problems, it is necessary to provide a protocol agent processing method and system based on mimicry defense, which solves the problem of protocol message processing in the existing mimicry defense system Complicated and can reduce the problem of protocol message duplication

Images