A method, device, electronic device and storage medium for selecting an executive body
By calculating the deviation degree of the execution result of the execution body, the problem of misjudgment and inability to distinguish the cause of the abnormality in the existing technology is solved, and the accurate screening of the execution body and the identification of the cause of the abnormality are realized.
Patent Information
- Application Number
- CN202111642289.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-29
- Publication Date
- 2025-01-21
- Estimated Expiration
- 2041-12-29
AI Technical Summary
In the prior art, there may be misjudgment and the cause of abnormal execution bodies cannot be distinguished, resulting in the inability to effectively screen out the true abnormal execution bodies.
By obtaining the execution results of at least three execution bodies, the deviation degree of the execution results is calculated, and based on the deviation degree, it is judged whether the execution body is abnormal, thereby distinguishing whether the abnormal execution body is caused by an attack or a construction error.
It achieves intuitive judgment on the accuracy of execution body output results, reduces misjudgments, can accurately identify the causes of abnormal execution bodies, and improves the accuracy and reliability of execution body screening.
Smart Images

Figure CN114281510B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of network communication and information security, and in particular to an execution body screening method, device, electronic equipment and storage medium. Background Art
[0002] There are four fundamental problems in the current cyberspace security. Due to the limitations of the design level of software and hardware components, vulnerabilities in information system design defects are difficult to avoid; in an open ecological environment, information systems cannot be completely autonomous and controllable, and the possibility of software and hardware backdoors exists for a long time; current technology is not yet able to thoroughly check all vulnerabilities and backdoors; and the security quality of products and systems is difficult to effectively control.
[0003] Mimicry defense introduces a multi-mode decision mechanism on the "dynamic-heterogeneous-redundant" architecture to form an uncertainty defense fog for attackers, effectively normalizing the uncertain threat problem in cyberspace into an engineering and technical problem that can be solved using robust control theory.
[0004] Affected by the limitations of the current application ecology, many application scenarios may not be able to generate multiple sets of highly heterogeneous executors at a low cost and in a short time. In the prior art, when judging whether there is an abnormality in the executor, the method of directly comparing the output results of each executor is generally adopted. When the comparison result shows that the output result of a certain executor is inconsistent with the others, it is judged as an abnormal executor. The above method does not take into account the misjudgment caused by slight differences in the output after the same input passes through different executors due to inconsistent executor composition, and when cleaning the executor later, it is impossible to judge whether the abnormal executor is caused by an attack or a slight error in the construction of the executor. Summary of the invention
[0005] Therefore, the technical problem to be solved by the present invention is to overcome the defects in the prior art that there may be misjudgment and the cause of the abnormality of the executable body cannot be distinguished, thereby providing an executable body screening method, device, electronic device and storage medium.
[0006] According to a first aspect, the present invention discloses an execution body screening method, comprising: obtaining execution results of at least three execution bodies; judging whether there is an abnormality in the execution results based on the execution results; when there is an abnormality in the execution results, judging whether any of the execution results is abnormal based on the deviation degree of the execution results; when any of the execution results is abnormal, judging the corresponding execution body as an abnormal execution body.
[0007] Optionally, obtaining the execution results of at least three execution bodies includes: obtaining at least three execution bodies according to a preset preferred execution body pool; receiving an externally input execution instruction; and inputting the execution instruction into the execution body to obtain the execution results of the at least three execution bodies.
[0008] Optionally, judging whether there is an exception in the execution result based on the execution result includes: converting the execution results of the at least three execution bodies into binary results; performing an XOR calculation based on the binary results to obtain an XOR calculation result; and judging whether there is an exception in the execution result based on the XOR calculation result.
[0009] Optionally, the deviation of the execution result is calculated using the following steps: converting the execution results of the at least three execution bodies into coding results; calculating the mean between the execution results based on the coding results; and calculating the deviation between each execution result and the mean based on the coding results and the mean.
[0010] Optionally, judging whether any of the execution results is abnormal based on the deviation degree of the execution results includes: traversing the deviation degrees to obtain the maximum deviation degree and the minimum deviation degree; calculating the average value of the maximum deviation degree and the minimum deviation degree; judging whether any deviation degree is greater than the average value; when the deviation degree is greater than the average value, judging it as an abnormal execution result; when the deviation degree is less than the average value, judging it as a normal execution result.
[0011] Optionally, the execution body screening method also includes: obtaining the abnormal execution body and all execution bodies in the current preferred execution body pool; determining whether the abnormal execution body exists in the current preferred execution body pool; when the abnormal execution body exists in the current preferred execution body pool, transferring the abnormal execution body to the alternative execution body pool.
[0012] Optionally, after transferring the abnormal executor to the alternative executor pool, the method further includes: obtaining the number of abnormal executors transferred out of the preferred executor pool; and transferring a corresponding number of executors from the alternative executor pool to the preferred executor pool in a first-in-first-out manner.
[0013] According to a second aspect, the present invention discloses an execution body screening device, comprising: an acquisition unit, used to acquire execution results of at least three execution bodies; a first judgment unit, used to judge whether there is an abnormality in the execution results based on the execution results; a second judgment unit, used to judge whether any of the execution results is abnormal based on the deviation of the execution results when an abnormality exists in the execution results; and a third judgment unit, used to judge the corresponding execution body as an abnormal execution body when any of the execution results is abnormal.
[0014] According to the third aspect, the present invention discloses an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor performs the steps of the executable screening method as described in the first aspect and any optional embodiment of the first aspect.
[0015] According to a fourth aspect, the present invention discloses a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the executable screening method as described in the first aspect and any optional implementation manner of the first aspect.
[0016] The technical solution of the present invention has the following advantages:
[0017] 1. The executable screening method provided by the present invention can intuitively judge the accuracy of the executable output result by calculating the deviation, thereby judging whether the execution result is abnormal and further judging whether the executable is abnormal. In addition, the magnitude of the deviation can show whether the abnormal executable is abnormal due to an attack or due to an error during construction, thus overcoming the defects of the prior art that there may be misjudgment and the inability to distinguish the cause of the executable abnormality.
[0018] 2. The executor screening method provided by the present invention realizes the online replacement mechanism of the executor by updating the preferred executor pool and the alternative executor pool, and makes the replacement process have the adaptive characteristics of the environment based on the deviation calculation, simplifies the mimetic scheduling strategy, and provides a new idea for the cost planning of mimetic system design. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0020] Figure 1 A flowchart of a specific example of the method for performing body screening in an embodiment of the present invention;
[0021] Figure 2 A flowchart of another specific example of the method for performing body screening in an embodiment of the present invention;
[0022] Figure 3 A flowchart of another specific example of the method for performing body screening in an embodiment of the present invention;
[0023] Figure 4 A flowchart of another specific example of the method for performing body screening in an embodiment of the present invention;
[0024] Figure 5 is a principle block diagram of a specific example of an actuator screening device in an embodiment of the present invention;
[0025] Figure 6 FIG. 4 is a specific example diagram of an electronic device in an embodiment of the present invention. DETAILED DESCRIPTION
[0026] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0027] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.
[0028] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, it can also be the internal connection of two components, it can be a wireless connection, or it can be a wired connection. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
[0029] In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.
[0030] The present invention discloses a method for screening an executive body, such as Figure 1 As shown, the following steps are included:
[0031] Step S1, obtaining execution results of at least three execution bodies.
[0032] Specifically, according to a preset preferred executable body pool, at least three executable bodies are obtained; externally input execution instructions are received; and the execution instructions are input into the executable bodies to obtain execution results of the at least three executable bodies.
[0033] Exemplarily, three execution bodies E1, E2 and E3 are randomly selected from the preferred execution body pool, and the three execution bodies simultaneously respond to the external input execution instructions to obtain output results A1, A2 and A3. In addition, the execution results of four execution bodies or other numbers of execution results can also be obtained, and the embodiment of the present invention does not limit the number of execution results obtained.
[0034] Step S2: judging whether there is any abnormality in the execution result according to the execution result.
[0035] Specifically, the process of determining whether there is an exception in the execution result can first convert the execution results of the at least three execution bodies into binary results; then, perform an XOR calculation based on the binary results to obtain an XOR calculation result; finally, determine whether there is an exception in the execution result based on the XOR calculation result.
[0036] Exemplarily, the output results A1, A2 and A3 are converted into binary results to obtain binary results r1, r2 and r3. In particular, when the lengths of r1, r2 and r3 are inconsistent, for the shorter binary results, "0" is added to the last bit. Taking r1=10, r2=10111, r3=10111 as an example, r1 is two bits and has a length of 2, r2 is five bits and has a length of 5, and r3 is five bits and has a length of 5. Among them, r1 with a length of 2 is shorter, and 0 is added to the end to the length of r2 or r3, that is, r1=10000.
[0037] Exemplarily, an XOR calculation is performed on each bit of the binary results r1, r2, and r3 to obtain an XOR calculation result C, wherein the XOR calculation result can be expressed by the following formula:
[0038]
[0039] Among them, r11 represents the first digit of the binary result r1, r21 represents the first digit of the binary result r2, r31 represents the first digit of the binary result r3, r12 represents the second digit of the binary result r1, r22 represents the second digit of the binary result r2, r32 represents the second digit of the binary result r3, and so on. n Represents the nth digit of the binary result r1, r2 n Represents the nth digit of the binary result r2, r3 n Represents the nth digit of the binary result r3.
[0040] Taking r1=1011, r2=1011, r3=1011 as an example, the XOR calculation result can be calculated by the following formula:
[0041]
[0042] Among them, XOR calculation means that when the values are different, the XOR result is 1; when the values are the same, the XOR result is 0. The XOR calculation result C=0.
[0043] Taking r1=1001, r2=1011, r3=1011 as an example, the XOR calculation result can be calculated by the following formula:
[0044]
[0045] Among them, XOR calculation means that when the values are different, the XOR result is 1; when the values are the same, the XOR result is 0. The XOR calculation result C=1.
[0046] Taking r1=1000, r2=1011, r3=1011 as an example, the XOR calculation result can be calculated by the following formula:
[0047]
[0048] Among them, XOR calculation means that when the values are different, the XOR result is 1; when the values are the same, the XOR result is 0. The XOR calculation result C=2.
[0049] According to the value of the XOR calculation result C, it can be judged whether there is an abnormality in the execution result. Among them, when C = 0, it means that the binary results r1, r2 and r3 are exactly the same. At this time, it can be judged that there is no abnormality in the execution result. When C ≠ 0, it means that there is a difference between the binary results r1, r2 and r3. At this time, it can be judged that there is an abnormality in the execution result. In particular, the larger the value of the XOR calculation result C, the greater the difference between r1, r2 and r3 at this time.
[0050] Step S3: when there is an abnormality in the execution result, determine whether any of the execution results is abnormal according to the deviation degree of the execution result.
[0051] Specifically, the process of calculating the degree of deviation can first convert the execution results of the at least three execution bodies into coding results; then, based on the coding results, calculate the mean between the execution results; finally, based on the coding results and the mean, calculate the degree of deviation between each execution result and the mean.
[0052] The process of converting the execution results of the at least three execution bodies into coding results can be performed by character set coding, and the execution results are converted into numerical values of a preset length. Then, the corresponding bits of all coding results are averaged. The sum of the differences between each bit code of the coding result and the mean of the corresponding bit is the deviation degree of the coding result.
[0053] For example, the output results A1, A2 and A3 are converted into coding results to obtain coding results R1, R2 and R3. The average value of each bit in the coding results R1, R2 and R3 is calculated to obtain the average value result It can be expressed by the following formula:
[0054]
[0055]
[0056] …
[0057]
[0058] in, Representative average results R11 represents the first digit of the encoding result R1, R21 represents the first digit of the encoding result R2, and R31 represents the first digit of the encoding result R3. Representative average results R12 represents the first digit of the encoding result R1, R22 represents the second digit of the encoding result R2, R32 represents the second digit of the encoding result R3, and so on. Representative average results The nth digit, R1 n Represents the nth digit of the encoding result R1, R2 n Represents the nth digit of the encoding result R2, R3 n Represents the nth digit of the encoding result R3. Integration gives the average result
[0059] For example, if the output results are encoded using the American Standard Code for Information Interchange as the character set, the encoding results are:
[0060] R1=\u0074\u0072\u0075\u0065, R2=\u0074\u0072\u0075\u0065, R3=\u0074\u0072\u0036\u0065.
[0061] The process of calculating the average result can be expressed by the following formula:
[0062]
[0063]
[0064]
[0065]
[0066] The process of calculating the deviation between each execution result and the mean value can be expressed by the following formula:
[0067]
[0068]
[0069]
[0070] Among them, D1 represents the deviation degree of the encoding result R1, D2 represents the deviation degree of the encoding result R2, and D3 represents the deviation degree of the encoding result R3.
[0071] Substituting the encoding result and the mean value of each bit, the deviation can be calculated, which can be expressed by the following formula:
[0072] D1=|0074-0074|+|0072-0072|+|0075-0062|+|0065-0065|=13
[0073] D2=|0074-0074|+|0072-0072|+|0075-0062|+|0065-0065|=13
[0074] D3=|0074-0074|+|0072-0072|+|0036-0075|+|0065-0065|=39
[0075] Furthermore, in the process of judging whether any of the execution results is abnormal based on the deviation degree of the execution results, the deviation degrees may be first traversed to obtain the maximum deviation degree and the minimum deviation degree; then the average value of the maximum deviation degree and the minimum deviation degree may be calculated; then, it may be judged whether any of the deviation degrees is greater than the average value; then, when the deviation degree is greater than the average value, it may be judged as an abnormal execution result; finally, when the deviation degree is less than the average value, it may be judged as a normal execution result.
[0076] For example, when D1=13, D2=13, and D3=39, the maximum deviation is 39 and the minimum deviation is 13, then the average value of the maximum deviation and the minimum deviation is Sequentially connect D1, D2 and D3 with By comparison, since 39>26, D3 is judged to be an abnormal execution result; since 13<26, D1 and D2 are judged to be normal execution results. In particular, when the deviation is much greater than the average value, it can be considered that the execution body is attacked by the network and is abnormal; when the deviation is not much different from the average value, it can be considered that there is an error in the construction of the execution body and it needs to be adjusted.
[0077] Step S4: when any of the execution results is abnormal, the corresponding execution body is judged as an abnormal execution body.
[0078] Exemplarily, when it is determined that D3 is an abnormal execution result, the execution body E3 corresponding to D3 is determined as an abnormal execution body. On the contrary, when it is determined that the execution result is not an abnormal value, the corresponding execution body is determined as a normal execution body.
[0079] The executable screening method provided by the present invention can intuitively judge the accuracy of the executable output result by calculating the deviation, thereby judging whether the execution result is abnormal and further judging whether the executable is abnormal. In addition, the magnitude of the deviation can show whether the abnormal executable is abnormal due to an attack or due to an error during construction, thus overcoming the defects of the prior art that there may be misjudgment and the inability to distinguish the cause of the executable abnormality.
[0080] As an optional embodiment of the present invention, Figure 2 As shown, the execution body screening method also includes:
[0081] Step S5, obtaining the abnormal executable and all executables in the current preferred executable pool.
[0082] Specifically, in order to optimize the computing power of the mimetic scheduling system, there is no need to remove abnormal executors from the preferred executor pool in real time. Normal executor parameters can be selected for mimetic scheduling during the peak period of network access. Abnormal executors found during the mimetic scheduling process are only recorded without being removed in real time. Then, during the trough period of network access, the removal process is performed. The removal process first obtains all executors in the current preferred executor pool and abnormal executors recorded during the peak period.
[0083] Step S6, determining whether the abnormal executable exists in the current preferred executable pool.
[0084] Specifically, since the processes of recording abnormal executors and eliminating abnormal executors may not be synchronized, and there are multiple judgment records of abnormal executors when eliminating abnormal executors, when eliminating them in sequence according to the abnormal executors' records, it is possible that the abnormal executor has been eliminated from the preferred executor pool. In order to ensure that the abnormal executor can be eliminated, it is necessary to determine whether the abnormal executor exists in the current preferred executor pool.
[0085] Step S7: when the abnormal executable body exists in the current preferred executable body pool, the abnormal executable body is transferred to the alternative executable body pool.
[0086] Specifically, when it is determined that the abnormal executor exists in the current preferred executor pool, the abnormal executor is removed from the preferred executor pool to ensure that there is no abnormal executor in the preferred executor pool. Furthermore, the abnormal executor is transferred to the alternative executor pool, which can facilitate the subsequent cleaning of the abnormal executor. The cleaning process can analyze the abnormal executor and determine the abnormal cause of the executor based on its deviation. If the executor is abnormal due to an attack, it can be restored to a normal executor by initializing the executor. If the executor has errors during construction, it can be restored to a normal executor by reconstructing it.
[0087] On the contrary, when the abnormal execution body does not exist in the current preferred execution body pool, the elimination process of the current record is stopped, and the judgment record of the next abnormal execution body is read.
[0088] As an optional embodiment of the present invention, Figure 3 As shown, after the abnormal execution body is transferred to the candidate execution body pool, the method further includes:
[0089] Step S8, obtaining the number of abnormal executors transferred out of the preferred executor pool.
[0090] Specifically, to ensure that the number of preferred executors and / or alternative executors is controllable, it is necessary to obtain the number of executors currently removed from the preferred executor pool, so as to add a corresponding number of executors to the preferred executor pool according to the number of removed executors.
[0091] Step S9: Transfer a corresponding number of executors from the candidate executor pool to the preferred executor pool in a first-in-first-out manner.
[0092] Specifically, Figure 4 As shown, since the abnormal executor will be cleaned after being transferred from the preferred executor pool to the alternative executor pool, at a certain moment, the alternative executor pool will simultaneously contain normal executors that have been cleaned and abnormal executors. In order to ensure that only normal executors are moved into the preferred executor pool, the transfer can be performed in a first-in-first-out manner. Transferring a corresponding number of executors from the alternative executor pool to the preferred executor pool can ensure that when executing mimetic scheduling, the preferred executor pool can provide enough executors to participate in the mimetic scheduling process.
[0093] The executor screening method provided by the present invention realizes the online replacement mechanism of the executor by updating the preferred executor pool and the alternative executor pool, and makes the replacement process have the adaptive characteristics of the environment according to the deviation calculation, simplifies the mimetic scheduling strategy, and provides a new idea for the cost planning of the mimetic system design.
[0094] The present invention also discloses an actuator screening device, such as Figure 5 As shown, including:
[0095] The acquisition unit 101 is used to acquire the execution results of at least three execution bodies; for details, please refer to the relevant description of step S1 in the above method embodiment, which will not be repeated here.
[0096] The first judgment unit 102 is used to judge whether there is an abnormality in the execution result according to the execution result; for details, please refer to the relevant description of step S2 in the above method embodiment, which will not be repeated here.
[0097] The second judgment unit 103 is used to judge whether any of the execution results is abnormal according to the deviation degree of the execution results when there is an abnormality in the execution results; for details, please refer to the relevant description of step S3 in the above method embodiment, which will not be repeated here.
[0098] The third judgment unit 104 is used to judge the corresponding execution body as an abnormal execution body when any of the execution results is abnormal; for details, please refer to the relevant description of step S4 in the above method embodiment, which will not be repeated here.
[0099] The executable screening device provided by the present invention can intuitively judge the accuracy of the executable output result by calculating the deviation, thereby judging whether the execution result is abnormal and further judging whether the executable is abnormal. Moreover, through the size of the deviation, it can be shown whether the abnormal executable is abnormal due to an attack or due to an error during construction, thus overcoming the defects of the prior art that there may be misjudgment and the reason for the executable abnormality cannot be distinguished.
[0100] The embodiment of the present invention further provides an electronic device, such as Figure 6 As shown, the electronic device may include a processor 201 and a memory 202, wherein the processor 201 and the memory 202 may be connected via a bus or other means. Figure 6 The example of connecting through bus is taken in the following.
[0101] The processor 201 may be a central processing unit (CPU). The processor 201 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or a combination of the above chips.
[0102] The memory 202 is a non-transitory computer-readable storage medium that can be used to store non-transitory software programs, non-transitory computer executable programs and modules, such as program instructions / modules corresponding to the executable body screening method in the embodiment of the present invention. The processor 201 executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory 202, that is, the executable body screening method in the above method embodiment is implemented.
[0103] The memory 202 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and applications required for at least one function; the data storage area may store data created by the processor 201, etc. In addition, the memory 202 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 202 may optionally include a memory remotely arranged relative to the processor 201, and these remote memories may be connected to the processor 201 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0104] The one or more modules are stored in the memory 202, and when executed by the processor 201, the following is performed: Figure 1 The executable body screening method in the illustrated embodiment.
[0105] Although the exemplary embodiments and their advantages have been described in detail, those skilled in the art may make various changes, substitutions and modifications to these embodiments without departing from the spirit of the present invention and the scope of protection defined by the appended claims, and such modifications and variations all fall within the scope defined by the appended claims. For other examples, those of ordinary skill in the art should readily understand that the order of the process steps may be changed while maintaining the scope of protection of the present invention.
[0106] In addition, the scope of application of the present invention is not limited to the processes, mechanisms, manufactures, material compositions, means, methods and steps of the specific embodiments described in the specification. From the disclosure of the present invention, it will be easily understood by those skilled in the art that the processes, mechanisms, manufactures, material compositions, means, methods or steps that currently exist or will be developed in the future, which perform substantially the same functions as the corresponding embodiments described in the present invention or obtain substantially the same results, can be applied according to the present invention. Therefore, the claims attached to the present invention are intended to include these processes, mechanisms, manufactures, material compositions, means, methods or steps within their scope of protection.
Claims
1. A method for selecting an executive body, characterized in that: include: Obtain the execution results of at least three execution bodies; According to the execution result, determining whether there is an abnormality in the execution result; When there is an abnormality in the execution result, judging whether any of the execution results is abnormal according to the deviation degree of the execution result; When any of the execution results is abnormal, the corresponding execution body is judged as an abnormal execution body; The deviation of the execution result is calculated using the following steps: Converting the execution results of the at least three execution bodies into coding results; According to the encoding result, calculating the mean value between the execution results; Calculate the deviation between each execution result and the mean value according to the encoding result and the mean value; The determining whether any of the execution results is abnormal according to the deviation of the execution results includes: Traversing the deviations to obtain the maximum deviation and the minimum deviation; Calculating an average value of the maximum deviation and the minimum deviation; Determine whether any deviation is greater than the average value; When the deviation is greater than the average value, it is judged as an abnormal execution result; When the deviation is smaller than the average value, it is determined as a normal execution result.
2. The method for selecting an actuator according to claim 1, characterized in that: The obtaining of the execution results of at least three execution bodies includes: According to the preset preferred executor pool, at least three executors are obtained; Receive external input execution instructions; The execution instruction is input into the execution body to obtain the execution results of the at least three execution bodies.
3. The method for selecting an executive body according to claim 1, characterized in that: The determining, according to the execution result, whether there is an abnormality in the execution result includes: Converting the execution results of the at least three execution bodies into binary results; Performing an XOR calculation according to the binary result to obtain an XOR calculation result; According to the XOR calculation result, it is determined whether there is an abnormality in the execution result.
4. The method for selecting an actuator according to claim 1, characterized in that: Also includes: Get the abnormal executor and all executors in the current preferred executor pool; Determine whether the abnormal executable exists in the current preferred executable pool; When the abnormal executable body exists in the current preferred executable body pool, the abnormal executable body is transferred to the alternative executable body pool.
5. The method for selecting an actuator according to claim 4, characterized in that: After the abnormal execution body is transferred to the candidate execution body pool, the method further includes: Get the number of abnormal executors transferred out of the preferred executor pool; A corresponding number of executors are transferred from the candidate executor pool to the preferred executor pool in a first-in-first-out manner.
6. An actuator screening device, characterized in that: include: An acquisition unit, used to acquire execution results of at least three execution bodies; A first judgment unit, configured to judge whether there is an abnormality in the execution result according to the execution result; A second judgment unit is used to judge whether any of the execution results is abnormal according to the deviation degree of the execution results when there is an abnormality in the execution results; A third judgment unit, configured to judge the corresponding execution body as an abnormal execution body when any of the execution results is abnormal; The deviation of the execution result is calculated using the following steps: Converting the execution results of the at least three execution bodies into coding results; According to the encoding result, calculating the mean value between the execution results; Calculate the deviation between each execution result and the mean value according to the encoding result and the mean value; The determining whether any of the execution results is abnormal according to the deviation of the execution results includes: Traversing the deviations to obtain the maximum deviation and the minimum deviation; Calculating an average value of the maximum deviation and the minimum deviation; Determine whether any deviation is greater than the average value; When the deviation is greater than the average value, it is judged as an abnormal execution result; When the deviation is smaller than the average value, it is determined as a normal execution result.
7. An electronic device, characterized in that: include: at least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor performs the steps of the execution body screening method as described in any one of claims 1-5.
8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the executable screening method according to any one of claims 1 to 5 are implemented.
Citation Information
Patent Citations
Majority consistent escape error processing device based on mimicry security defense zero-day attack and method thereof
CN106874755A
State evaluation and fault early warning method, device and equipment for train traction system
CN109747680A