Heterogeneous Functional Equivalent Generator for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network apparatuses are vulnerable to security threats due to their homogeneous redundant systems, which can be exploited by identifying and attacking unknown defects or trapdoors, compromising information and network security.
Innovation Solution
An apparatus and method for generating heterogeneous functional equivalents, utilizing a heterogeneous functional equivalent generator that selects and combines elements from an element pool based on a generation policy, including function lists and templates, to create flexible and variable redundant systems that prevent snooping and attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If homogeneous redundant systems are used, then system reliability is improved, but security vulnerability increases due to predictable structure patterns
Solution Approach 1:
The patent applies asymmetry by generating heterogeneous functional equivalents with different interior structure forms from the same exterior service function. Instead of using identical homogeneous structures for redundancy, the system creates asymmetric variations in internal architecture, software components, and hardware configurations while maintaining the same external functionality, making security attacks less predictable and effective
Solution Approach 2:
The patent utilizes parameter changes by varying multiple structural parameters of the redundant systems including interior layout, component arrangement, software module organization, and configuration settings. These parameter variations maintain functional equivalence while creating diverse structural patterns that prevent attackers from exploiting predictable homogeneous structures
2Object-affected harmful factors
If heterogeneous functional equivalents are generated, then security against attacks is improved, but system complexity increases
Solution Approach 1:
The patent applies universality through the heterogeneous functional equivalent generation device that can create multiple different interior structure forms from a single exterior service function specification. This universal generation capability allows the system to produce diverse heterogeneous equivalents without requiring separate design processes for each variant, managing complexity through a unified generation mechanism
Solution Approach 2:
The patent uses copying by creating multiple copies of the functional equivalent with varied interior structures. Instead of designing each heterogeneous system from scratch, the generation device replicates the exterior service function while systematically varying interior parameters, reducing design complexity through automated copying with parameterization
3Ease of manufacture
If static and determinate mapping relationships are used between exterior and interior structures, then system design simplicity is maintained, but susceptibility to sniffing and scanning attacks increases
Solution Approach 1:
The patent applies dynamics by transforming the static mapping relationship between exterior and interior structures into a dynamic, variable relationship. The heterogeneous functional equivalents exhibit different interior structure configurations for the same exterior function, creating a dynamic landscape that changes across instances, making sniffing and scanning attacks ineffective as patterns cannot be consistently detected
Data Source
AI summary
An apparatus for generating heterogeneous functional equivalent and method thereof includes: a heterogeneous functional equivalent generator and an element pool connected to the heterogeneous functional equivalent generator, where the element pool includes at least one element. The heterogeneous functional equivalent generator is configured to obtain a generation policy and is further configured to select element sets corresponding to the number from the element pool according to the generation policy. The heterogeneous functional equivalent generator is further configured to generate the number of heterogeneous functional equivalents based on the selected element sets. Because the elements for constructing heterogeneous functional equivalents are different, the relationship between element and service response output by the heterogeneous functional equivalent to outside is uncertain, thereby making it uneasy to sniff an unknown defect or a backdoor of the heterogeneous functional equivalent, and lowering the success rate of an intruder's attack on the heterogeneous functional equivalent.