A dynamic transformation strategy-based mimicry scheduling system

Abstract

The application provides a dynamic transformation strategy-based mimicry scheduling system, comprising: a scheduling manager, which is used for sending online and offline commands to control online time and online strategy of left and right scheduling modules; a left scheduling module, which is used for judging whether to switch to the mimicry scheduling system for execution body scheduling according to the online and offline commands; a right scheduling module, which is heterogeneous with the left scheduling module in design, and is used for judging whether to switch to the mimicry scheduling system for execution body scheduling according to the online and offline commands; a data buffer, which is used for receiving and buffering abnormal execution body information sent by a decider according to online and offline notifications of the left and right scheduling modules sent by the scheduling manager, and forwarding the abnormal execution body information to the scheduling module in the online state; and an output selector, which is used for switching the scheduling module in the online state to be connected with the data buffer according to the online and offline notifications of the left and right scheduling modules sent by the scheduling manager.

Description

Technical Field

[0001] This invention relates to the field of mimicry defense, and more particularly to a mimicry scheduling system based on a dynamic transformation strategy. Background Technology

[0002] In a mimicry system, the executor relies on dynamic polling to mitigate security vulnerabilities and backdoors. However, as crucial components of a mimicry system, the input agent, arbitrator, and scheduling module require more than just traditional security measures. Leveraging mimicry principles to enhance the security of these components is essential for improving the overall security of the mimicry system. The scheduling module, acting as the brain controlling the executor, differs from the input agent and arbitrator in that its operation is not continuous. It only activates during system anomalies or scheduled events. Therefore, making the scheduling module dynamic and randomized does not reduce system efficiency while significantly improving its security. Summary of the Invention

[0003] To address the aforementioned issues, it is necessary to provide a mimicry scheduling system based on a dynamic transformation strategy.

[0004] This invention proposes a mimicry scheduling system based on a dynamic transformation strategy, comprising:

[0005] The scheduling manager is used to send online and offline commands to control the online time and online strategy of the left and right scheduling modules;

[0006] The left scheduling module is used to receive online and offline commands sent by the scheduling manager, and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands;

[0007] The right scheduling module is heterogeneous with the left scheduling module in design. It is used to receive online and offline commands sent by the scheduling manager and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands.

[0008] The data buffer is used to receive online and offline notifications from the left and right scheduling modules sent by the scheduling manager. When the left and right scheduling modules are in the online / offline switching state, it receives and buffers the exception execution body information sent by the arbitrator. After the online / offline switching of the left and right scheduling modules is completed, it forwards the exception execution body information to the scheduling module in the online state.

[0009] The output selector is used to receive online and offline notifications from the scheduling manager for the left and right scheduling modules. After the online and offline states of the left and right scheduling modules are switched, the TX and RX signals of the scheduling module that is in the online state are connected to the data buffer.

[0010] Based on the above, the heterogeneity between the right scheduling module and the left scheduling module is reflected in the use of different operating systems and different scheduling algorithms.

[0011] Based on the above, the left scheduling module is implemented using a low-performance processor, while the right scheduling module is implemented using a high-performance processor.

[0012] Based on the above, the left scheduling module is implemented by running an RTOS operating system on a microcontroller, and according to the exception information sent by the arbiter, it uses a weighted scheduling algorithm to schedule new execution units to come online from the backup execution unit pool.

[0013] Based on the above, the right scheduling module is implemented by running the Linux operating system on the ARM processor, and according to the exception information sent by the arbiter, it uses a random scheduling algorithm to schedule new execution units to come online from the backup execution unit pool.

[0014] Based on the above, the data buffer provides a unified Ethernet interface to the outside world, which is implemented through CPLD, FPGA or dedicated chip.

[0015] Based on the above, the scheduling manager uses a round-robin switching algorithm to control the online and offline status of the left and right scheduling modules.

[0016] Based on the above, the scheduler dynamically adjusts the interval t for polling and switching between the left and right scheduling modules according to the frequency δ of the arbiter sending abnormal messages;

[0017] When the frequency δ of the arbiter sending abnormal messages is relatively fast, the interval t should be reduced.

[0018] When the frequency δ of the arbiter sending abnormal messages is slow, the interval t is increased.

[0019] Based on the above, the scheduling manager is implemented using a bare microcontroller program.

[0020] This invention enhances the fog-like nature of the mimicry scheduling module and improves the security of the internal components of the mimicry system by heterogeneously, dynamically, and randomly changing the scheduling module in the mimicry system, thereby altering the static nature of the scheduling module's operating environment and algorithm.

[0021] Additional aspects and advantages of the invention will become apparent in the following description or may be learned by practice of the invention. Attached Figure Description

[0022] The above and / or additional aspects and advantages of the present invention will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, in which:

[0023] Figure 1 A system structure block diagram of the present invention is shown. Detailed Implementation

[0024] To better understand the above-mentioned objectives, features, and advantages of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that, unless otherwise specified, the embodiments and features described in these embodiments can be combined with each other.

[0025] Many specific details are set forth in the following description in order to provide a full understanding of the invention. However, the invention may also be practiced in other ways different from those described herein, and therefore the scope of protection of the invention is not limited to the specific embodiments disclosed below.

[0026] like Figure 1 As shown, this invention proposes a mimicry scheduling system based on a dynamic transformation strategy, comprising:

[0027] The scheduling manager is used to send online and offline commands to control the online time and online strategy of the left and right scheduling modules;

[0028] The left scheduling module is used to receive online and offline commands sent by the scheduling manager, and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands;

[0029] The right scheduling module is heterogeneous with the left scheduling module in design. It is used to receive online and offline commands sent by the scheduling manager and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands.

[0030] The data buffer is used to receive online and offline notifications from the left and right scheduling modules sent by the scheduling manager. When the left and right scheduling modules are in the online / offline switching state, it receives and buffers the exception execution body information sent by the arbitrator. After the online / offline switching of the left and right scheduling modules is completed, it forwards the exception execution body information to the scheduling module in the online state.

[0031] The output selector is used to receive online and offline notifications from the scheduling manager for the left and right scheduling modules. After the online and offline states of the left and right scheduling modules are switched, the TX and RX signals of the scheduling module that is in the online state are connected to the data buffer.

[0032] Specifically, the heterogeneity between the right and left scheduling modules lies in their use of different operating systems and scheduling algorithms. The left scheduling module is implemented by running an RTOS operating system on a microcontroller and, based on exception information sent by the arbiter, uses a weighted scheduling algorithm to schedule new executors from the backup executor pool. It operates on a low-performance processor, is easy to implement, and has fewer vulnerabilities. The right scheduling module is implemented by running a Linux operating system on an ARM processor and, based on exception information sent by the arbiter, uses a random scheduling algorithm to schedule new executors from the backup executor pool. It operates on a high-performance processor but has more vulnerabilities. By switching between the left and right schedulers, the system can achieve primary / backup functionality, improve the dynamism of the scheduling system's operating environment, and reduce power consumption.

[0033] The data buffer provides a unified Ethernet interface and determines whether to put RX data into the buffer based on messages sent by the scheduler manager. When the scheduler manager notifies the data buffer that the left scheduler module and the right scheduler module are in an online or offline state, the data buffer temporarily stores the received decision message in the buffer and waits for the scheduler manager to send the online state switching completion signal from the left and right scheduler modules. Then, the decision message in the buffer is sent to the online scheduling module through the output selector. The implementation of the data buffer is independent of the operating system and can be implemented using CPLD, FPGA, or dedicated chip.

[0034] The scheduling manager uses a polling switching algorithm to control the online and offline status of the left and right scheduling modules. At time t0, the scheduling manager notifies the left scheduling module to go online and the right scheduling module to go offline for cleaning, and sends scheduling switching information to the output selector and data buffer. After the left scheduling module goes online, it sends its online status to the scheduling manager. Simultaneously, after receiving the switching completion signal from the output selector, the scheduling manager sends a switching completion signal to the data buffer. At time t0+t, the left scheduling module goes offline and the right scheduling module goes online, where t is the interval for polling the left and right scheduling modules. The interval is dynamically adjusted based on the frequency δ of the arbiter sending exception messages. When the frequency δ of the arbiter sending exception messages is high, the interval t is also low; when the frequency δ of the arbiter sending exception messages is low, the interval t increases dynamically, typically t=2δ. The scheduling management function is relatively simple. To avoid vulnerabilities or backdoors introduced by the operating system, its functionality can be implemented using bare microcontroller code.

[0035] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A mimicry scheduling system based on a dynamic transformation strategy, characterized in that, include: The scheduling manager is used to send online and offline commands to control the online time and online strategy of the left and right scheduling modules; The left scheduling module is used to receive online and offline commands sent by the scheduling manager, and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands; The right scheduling module is heterogeneous with the left scheduling module in design. It is used to receive online and offline commands sent by the scheduling manager and determine whether to switch to the mimicry scheduling system for execution body scheduling based on the online and offline commands. The data buffer is used to receive online and offline notifications from the left and right scheduling modules sent by the scheduling manager. When the left and right scheduling modules are in the online / offline switching state, it receives and buffers the exception execution body information sent by the arbitrator. After the online / offline switching of the left and right scheduling modules is completed, it forwards the exception execution body information to the scheduling module in the online state. The output selector is used to receive online and offline notifications from the scheduling manager for the left and right scheduling modules. After the online and offline states of the left and right scheduling modules are switched, the TX and RX signals of the scheduling module that is in the online state are connected to the data buffer.

2. The mimicry scheduling system based on dynamic transformation strategy according to claim 1, characterized in that: The heterogeneity between the right scheduling module and the left scheduling module is reflected in the use of different operating systems and different scheduling algorithms.

3. The mimicry scheduling system based on dynamic transformation strategy according to claim 2, characterized in that: The left scheduling module is implemented using a low-performance processor, while the right scheduling module is implemented using a high-performance processor.

4. The mimicry scheduling system based on dynamic transformation strategy according to claim 3, characterized in that: The left scheduling module is implemented by running an RTOS operating system on a microcontroller. Based on the exception information sent by the arbiter, it uses a weighted scheduling algorithm to schedule new execution units to come online from the backup execution unit pool.

5. The mimicry scheduling system based on dynamic transformation strategy according to claim 3, characterized in that: The right scheduling module is implemented by running the Linux operating system on the ARM processor, and uses a random scheduling algorithm to schedule new executors to come online from the backup executor pool based on the exception information sent by the arbiter.

6. The mimicry scheduling system based on dynamic transformation strategy according to claim 1, characterized in that: The data buffer provides a unified Ethernet interface and is implemented using a CPLD, FPGA, or dedicated chip.

7. The mimicry scheduling system based on a dynamic transformation strategy according to claim 1, characterized in that, The scheduling manager uses a round-robin switching algorithm to control the online and offline status of the left and right scheduling modules.

8. The mimicry scheduling system based on a dynamic transformation strategy according to claim 7, characterized in that: The scheduler dynamically adjusts the interval t between polling and switching the left and right scheduling modules based on the frequency δ of the exception messages sent by the arbiter; When the frequency δ of the arbiter sending abnormal messages is relatively fast, the interval t should be reduced. When the frequency δ of the arbiter sending abnormal messages is slow, the interval t is increased.

9. The mimicry scheduling system based on dynamic transformation strategy according to claim 1, characterized in that: The scheduling manager is implemented using bare microcontroller code.

Images