Mimicry switch judgment system and method based on trusted measurement

Abstract

The invention belongs to the technical field of network security, and discloses a mimicry switch decision system based on trusted measurement, and the system comprises a forwarding plane, a managementinterface agent, an intermediate adaptation module, a forwarding plane agent, a plurality of heterogeneous actuators, a trusted measurement-based mimicry decision module and a situation awareness andnegative feedback scheduling module. The invention further discloses a mimicry switch judgment method based on trusted measurement. The mimicry switch judgment method comprises the steps: setting mimicry switch judgment elements; distributing input information; collecting output information; carrying out mimicry decision based on credibility measurement; issuing a judgment result, sensing the threat situation of the switch, and scheduling an executor; the mimicry decision based on credibility measurement comprises the following steps: establishing an executive credible index tree; collectingand updating the credible index data of the executive body; calculating the credible weight of the output result of each executive body; and calculating the credibility of each output result. The method can effectively reduce the influence of unknown loopholes and potential backdoors, and improves the safety protection level of a local area network.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a verdict system and method for a mimetic switch based on trustworthiness measurement. Background technique [0002] With the rapid development of network communication technology, the network has been integrated into all fields of society, and has brought a profound impact on politics, economy, people's work and life. However, in recent years, network security incidents have emerged one after another, which has had a huge impact on the country, society, economy, and people's work and life. Network security has also attracted extensive attention from various countries, and the network security industry is also developing rapidly. As an important network infrastructure, switches are full of switches and play an extremely important role in enterprise networks, data center networks, or carrier networks. However, the existing technical level (Principles of Mimic...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the problem that the existing patched switch defense method can only defend against security threats caused by known loopholes and backdoors, but is helpless against zero-day loopholes and unknown backdoors, the present invention proposes a verdict system for mimic switches based on trusted metrics and method, the mimic switch has built-in security capabilities, which can reduce the security threats caused by unknown vulnerabilities and potential backdoors of the switch to the local area network

Images