基于安全策略的负载感知动态调度机制

发布时间：2018-03-14 06:25

本文选题：单点脆弱性　切入点：主动防御技术　出处：《计算机应用》2017年11期 　论文类型：期刊论文

【摘要】：针对软件定义网络(SDN)网络控制器流规则篡改攻击等单点脆弱性威胁,传统安全解决方案如备份、容错机制等存在被动防御缺陷,无法从根本上解决控制层安全问题。结合目前移动目标防御、网络空间拟态防御等主动防御技术研究现状,提出一种基于异构冗余结构的动态安全调度机制。建立控制器执行体与调度体调度模型,根据系统攻击异常、异构度等指标,以安全性为原则设计动态调度策略;同时考虑系统负载因素,通过设计调度算法LASSA将调度问题转化为动态双目标优化问题,以实现优化的调度方案。仿真结果表明,对比静态结构,动态调度机制在累积异常值、输出安全率等指标上有明显优势,说明安全调度机制中的动态性与多样性能够显著提高系统抵御攻击能力,LA-SSA机制负载方差较安全优先调度更平稳,在实现安全调度的同时避免了负载失衡问题,验证了安全调度机制的有效性。
[Abstract]:For single point vulnerability threats such as software defined SDN) network controller flow rule tampering attack, traditional security solutions such as backup, fault-tolerant mechanism and so on have passive defensible defects. Can not fundamentally solve the control layer security problems. Combined with the current mobile target defense, cyberspace pseudo defense and other active defense technology research status, A dynamic security scheduling mechanism based on heterogeneous redundancy structure is proposed, and the scheduling model of controller executor and scheduler is established. The dynamic scheduling strategy is designed according to the index of system attack anomaly and heterogeneity degree. At the same time, considering the load factor of the system, the scheduling problem is transformed into a dynamic bi-objective optimization problem by designing the scheduling algorithm LASSA. The simulation results show that the dynamic scheduling mechanism accumulates outliers compared with the static structure. The output-security rate has obvious advantages, which indicates that the dynamic and diversity of security scheduling mechanism can significantly improve the system's ability to resist attack. The load variance of LA-SSA mechanism is more stable than that of security priority scheduling. The problem of load imbalance is avoided while security scheduling is realized, and the effectiveness of the security scheduling mechanism is verified.
【作者单位】：国家数字交换系统工程技术研究中心;
【基金】：国家自然科学基金资助项目(61572520,61521003) 上海市科研计划项目(14DZ1104800)~~
【分类号】：TP393.08

【相似文献】