Annular mimicry architecture without protocol state, defense method and readable storage medium

Abstract

The invention provides a mimicry defense method for an annular mimicry architecture without a protocol state. The method comprises the following steps that: a request side sends request information toan input agent, and the input agent copies and distributes the request information to each equivalent heterogeneous execution body through a one-way communication channel after normalizing a protocol; each equivalent heterogeneous execution body processes the request information and sends response information to a judgment module through a one-way communication channel; and the judgment module judges the response information, sends the response information to a request side through a one-way request side communication channel if judgment succeeds, and sends the judgment information to a feedback controller if judgment fails so as to adjust the state of each heterogeneous execution body. According to the mimicry defense method, the requirement on the input agent is reduced, the structure of the agent is simplified, the agent is prevented from becoming a performance bottleneck, the problem that the agent is easily attacked is solved, and the security of the whole mimicry architecture isimproved.

Description

technical field [0001] The invention relates to a mimetic defense system, in particular to a ring-like mimetic architecture in a no-protocol state, a defense method and a readable storage medium. Background technique [0002] With the rapid development of the network, more and more security issues in cyberspace have been exposed, and traditional passive defenses are often powerless to deal with increasingly complex network security issues. Cyberspace mimicry defense technology fundamentally transforms passive defense against unknown problems in unknown environments into active defense. [0003] A mimic defense system generally consists of an input agent, an equivalent heterogeneous executive, an arbiter, and a feedback controller. The input agent completes the copying and distribution of the input information on the request side to the equivalent heterogeneous executor; the equivalent heterogeneous executor executes the information input on the request side and outputs the ...

AI Technical Summary

Problems solved by technology

In this method, the agent generally runs on the server, such as nginx. In this way, the agent needs to establish a connection with the equivalent heterogeneous execution body of heterogeneous redundancy, and perform the same operation, which reduces the efficiency of the agent and improves the performance requirements for the agent. , the proxy can easily become the performance bottleneck of the entire system

At the same time, the agent runs in a systematic environment, and its own security cannot be guaranteed

In addition, after processing the request, the equivalent heterogeneous executive will send the processing result to the arbiter for adjudication, and the adjudication result will be returned by the same route. The request and response are on the same line, which will also damage the system security to a certain extent.

Images