Network space mimicry defense method and device based on game theory, medium and terminal

Abstract

The invention discloses a network space mimicry defense method and device based on the game theory, a medium and a terminal, and the method comprises the steps: outputting an output type corresponding to an attacker based on a dynamic heterogeneous redundant structure when the attacker attacks an executor; for each attack type of the attacker, based on a Markov chain corresponding to the attack model and the output type, determining an attack income and a defense income corresponding to the attack type; determining a defense strategy of the defender based on the attack income and the defense income corresponding to each attack type, and performing dynamic defense based on the defense strategy. The output type is determined through the dynamic heterogeneous redundant structure, the attack income and the defense income are determined based on the Markov chain and the output type when the game model is quantized, and finally the defense strategy is determined according to the attack income and the defense income, so the resource utilization rate of an executor can be improved, and the defense cost can be reduced.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a method, device, medium and terminal for network space mimicry defense based on game theory. Background technique [0002] Cyberspace mimic defense (CMD) is a new type of network security architecture, which increases the unpredictability of the system through multi-mode ruling and negative feedback mechanism, limits the detection and utilization of vulnerabilities by attackers, and automatically changes system resources. vulnerability, to achieve the goal of not reducing the initial information entropy, so as to realize the response to unknown unknown threats. For example, the typical architecture of cyberspace mimicry defense is Dynamic Heterogeneous Redundancy (DHR). Dynamic Heterogeneous Redundancy implements intrusion detection of attack behavior and dynamic execution of defense strategies through multi-mode arbitration and negative feedback mechanisms. ...

AI Technical Summary

Problems solved by technology

The negative feedback mechanism detects the multi-mode judgment output. If there is an abnormal situation, the execution body will be reconstructed and cleaned online or offline. When rebuilding and cleaning the execution body online or offline, it is easy to cause waste of defense costs.

Images