CN109818951B - Functional equivalent executive body reliability assessment method and device - Google Patents

Functional equivalent executive body reliability assessment method and device Download PDF

Info

Publication number
CN109818951B
CN109818951B CN201910048265.1A CN201910048265A CN109818951B CN 109818951 B CN109818951 B CN 109818951B CN 201910048265 A CN201910048265 A CN 201910048265A CN 109818951 B CN109818951 B CN 109818951B
Authority
CN
China
Prior art keywords
executive
historical event
event record
credibility
execution
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910048265.1A
Other languages
Chinese (zh)
Other versions
CN109818951A (en
Inventor
韩国栋
燕昺昊
沈剑良
刘冬培
刘勤让
李沛杰
陈艇
张文建
汤先拓
魏帅
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Information Engineering University of PLA Strategic Support Force
Original Assignee
Information Engineering University of PLA Strategic Support Force
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Information Engineering University of PLA Strategic Support Force filed Critical Information Engineering University of PLA Strategic Support Force
Priority to CN201910048265.1A priority Critical patent/CN109818951B/en
Publication of CN109818951A publication Critical patent/CN109818951A/en
Application granted granted Critical
Publication of CN109818951B publication Critical patent/CN109818951B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

The invention provides a method and a device for evaluating reliability of a function equivalent executive body. The method comprises the following steps: initializing historical event record queue D maintained by function equivalent executive m in executive pool of mimicry defense systemmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current moment; according to the executive m at tiService response task execution result determination t of timeiHistorical event record d of time of dayiTaking the value of (A); determining t according to a set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi(ii) a According to tiHistorical event record d of time of dayiValue of and confidence impact weight wiAnd determining the reliability of the execution body m at the current moment. The device includes: the device comprises a queue initialization unit, a historical event record assignment unit, a credibility influence weight calculation unit and an executive body credibility calculation unit. The invention provides quantitative basis for the design of the mimicry scheduling strategy, and is beneficial to accurately selecting the high-reliability execution body under the condition of resource limitation.

Description

Functional equivalent executive body reliability assessment method and device
Technical Field
The invention relates to the technical field of network security, in particular to a method and a device for evaluating the reliability of a function equivalent executive body.
Background
The traditional network defense technology comprises a firewall technology, an intrusion detection technology, a honeypot sandbox technology and the like, although an effective defense effect is achieved on network attacks to a certain extent, the traditional network defense technology belongs to a static protection mode fundamentally, namely a defense rule needs to be constructed based on the prior knowledge, and the discovery and elimination of the known threats in target equipment are emphasized, so that a good defense effect can be achieved only aiming at the known characteristic attacks and the fixed mode attacks, and the unknown backdoor attacks existing in the equipment and the system and the unknown type attacks launched by attackers cannot be effectively responded.
The mimicry defense theory is used as a newly proposed network space active defense technology, and by constructing a dynamic, heterogeneous and redundant execution mechanism and an operation framework in target equipment, effective defense against unknown attacks such as backdoor bugs can be effectively realized. In the mimicry defense device, a controller generates a scheduling strategy according to the difference between input parameters and tasks to be processed, selects a corresponding heterogeneous function equivalent executive from a heterogeneous executive pool to respond to an external service request, and finally adopts a corresponding arbitration strategy to judge and output a service response result.
Therefore, the reliability of the heterogeneous functional equivalent executors, one of the most important units in the theory of mimicry defense, is self-evident to the importance of the service response results. Especially in an environment with limited actual network resources, how to select a high-confidence execution body from the execution body pool will significantly affect the implementation of the mimicry defense function. However, in the existing research aiming at the mimicry defense theory, a specific quantitative calculation method is not provided for the reliability of the isomeric function equivalent executive body, and the actual requirement is difficult to meet.
Disclosure of Invention
In order to overcome the defects in the existing network space defense technology, the invention provides a method and a device for evaluating the reliability of a function equivalent executive body, and a quantitative calculation mode is provided for the reliability of the function equivalent executive body in a mimicry defense device.
In one aspect, the present invention provides a method for assessing reliability of a function equivalent executive, the method comprising:
step 1, initializing a historical event record queue D maintained by a function equivalent executive m in an executive pool of a mimicry defense systemmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current time, wherein M is 1,2, …, M and M represents the number of execution bodies in an execution pool;
step 2, according to the execution body m at tiService response task execution result determination t of timeiHistorical event record d of time of dayi1,2,. and l;
step 3, determining t according to a set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi
Step 4, according to tiHistorical event record d of time of dayiValue of and confidence impact weight wiAnd determining the reliability of the execution body m at the current moment.
Further, the step 2 specifically includes:
if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, if the two output results are consistent, the output result of the executive m is correct, and d is recordediB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number;
if tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0。
Further, the step 3 specifically includes:
calculating a historical event record queue D according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l.
Further, the step 4 specifically includes:
calculating the credibility B of the executive body m according to the formula (2)m
Figure GDA0002021209980000031
Wherein the content of the first and second substances,
Figure GDA0002021209980000032
representing normalized confidence impact weights.
Further, the method further comprises:
step 5, sequencing all executors in the executor pool according to the credibility, and scheduling and selecting the executors with high credibility to execute the service response task;
and 6, updating the historical event record queue of each executive according to the service response task execution result of each executive at the latest moment.
In another aspect, the present invention provides a function equivalent executor credibility assessment apparatus, comprising:
a queue initialization unit for initializing the historical event record queue D maintained by the function equivalent executive body mmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current time, wherein M is 1,2, …, M and M represents the number of execution bodies in an execution pool;
a historical event record assignment unit used for assigning t according to the execution body miService response task execution result determination t of timeiHistorical event record d of time of dayi1,2,. and l;
a confidence influence weight calculation unit for determining t according to the set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi
An execution body reliability calculation unit for calculating the reliability of the execution body according to tiHistorical event record d of time of dayiValue of and confidence impact weight wiAnd determining the reliability of the execution body m at the current moment.
Further, the historical event record assigning unit is specifically configured to:
if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, if the two output results are consistent, the output result of the executive m is correct, and d is recordediB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number;
if tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0。
Further, the credibility impact weight calculation unit is specifically configured to:
calculating a historical event record queue D according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l.
Further, the execution body credibility calculation unit is specifically configured to:
calculating the credibility B of the executive body m according to the formula (2)m
Figure GDA0002021209980000041
Wherein the content of the first and second substances,
Figure GDA0002021209980000042
representing normalized confidence impact weights.
Further, the apparatus further comprises:
the executive sequencing unit is used for sequencing all executors in the executive pool according to the credibility and scheduling and selecting the executors with high credibility to execute the service response task;
and the queue updating unit is used for updating the historical event record queue of each executive according to the service response task execution result of each executive at the latest moment. .
The invention has the beneficial effects that:
the functional equivalent executive body credibility assessment method and the device provided by the invention have the following beneficial effects:
(1) the invention provides a quantitative calculation mode of the reliability of the heterogeneous function executive body in the mimicry defense device, advances the reliability of the function equivalent executive body from the prior qualitative description to the quantitative definition, provides a quantitative basis for the design of a high-safety mimicry scheduling strategy, and is beneficial to accurately selecting the high-reliability executive body under the condition of resource limitation.
(2) The reliability in the invention is obtained by calculation based on the execution result of the historical events of the execution body, and the influence degree of the historical events on the current reliability is distinguished by adopting an equal difference weight mechanism, so that the reliability and the robustness of the calculation result of the reliability are enhanced.
Drawings
Fig. 1 is a schematic flow chart of a method for evaluating reliability of a functionally equivalent executive body according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a functional equivalent executive reliability evaluation device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below with reference to the accompanying drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 is a schematic flow chart of a method for evaluating reliability of a functionally equivalent executive body according to an embodiment of the present invention. As shown in fig. 1, the method comprises the steps of:
S101. initializing historical event record queue D maintained by function equivalent executive m in executive poolmSaid historical event record queue DmThe execution pool comprises l historical event records, wherein M is 1,2, …, M represents the number of execution bodies in the execution pool;
s102, according to the execution body m at tiService response result determination t of timeiHistorical event record d of time of dayi1,2,. and l;
specifically, if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, if the two output results are consistent, the output result of the executive m is correct, and d is recordediB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number; in practical applications, b may be set to 1.
If tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0。
S103, determining t according to the set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi
Specifically, the historical event record queue D is calculated according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l.
S104, according to tiHistorical event record d of time of dayiValue of and confidence impact weight wiThe confidence level of the executable m is determined.
Specifically, the reliability R of the executive body m is calculated according to the formula (2)m
Figure GDA0002021209980000061
Wherein the content of the first and second substances,
Figure GDA0002021209980000062
representing normalized confidence impact weights.
The functional equivalent executive body credibility evaluation method provided by the embodiment of the invention provides a quantitative calculation mode of the credibility of the heterogeneous functional executive body in the mimicry defense device, advances the credibility of the functional equivalent executive body from the past qualitative description to quantitative definition, provides quantitative basis for the design of a high-safety mimicry scheduling strategy, and is beneficial to accurately selecting the high-credibility executive body under the condition of resource limitation. Meanwhile, the reliability in the embodiment of the invention is obtained by calculation based on the execution result of the historical event of the execution body, and the influence degree of the historical event on the current reliability is distinguished by adopting an equal-difference weight mechanism, so that the reliability and the robustness of the calculation result of the reliability are enhanced.
On the basis of the above embodiment, the method further comprises the following steps:
s105, sequencing all executors in the executor pool according to the credibility, and scheduling and selecting the executors with high credibility to execute the service response task;
specifically, the credibility of all the executables in the executor pool is obtained through calculation according to the steps S101 to S104, then all the executables are sorted according to the high-low order of the credibility, and the top n (the number n of the executables to be scheduled is determined as required) executables with higher credibility are scheduled and selected for service response.
And S106, updating the historical event record queue of each executive according to the service response task execution result of each executive at the latest moment.
Specifically, the reliability of the current time is calculated based on the event records at the previous time l closest to the current time, and therefore, the historical event record queue needs to be updated according to the service response result of each execution body at the latest time and in the assignment manner of step S102.
On the basis of the above embodiments, the present invention provides another embodiment, which specifically comprises the following steps:
S201maintaining a historical event record queue D for a functionally equivalent executive A in an executive pool of a mimicry defense systemAIn this embodiment, the length l of the initialized queue is 10, that is, the last 10 historical event records closest to the current time are selected and recorded as:
DA={d1,d2,d3,d4,d5,d6,d7,d8,d9,d10}
s202, recording history events diAnd assigning values, and assuming that the service response results of the executive A at 10 moments before the current moment are respectively as follows: (true, timeout, true, false, true), so the assigned historical event record queue:
DA={1,1,1,0,1,1,-1,1,1,1}
s203, calculating the confidence impact weight, and selecting the queue length l as 10, so the weight tolerance
Figure GDA0002021209980000071
Further, the confidence impact weight vector can be obtained as:
WA={1,0.9,0.8,0.7,0.6,0.5,0.4,0.3,0.2,0.1}
s204, according to
Figure GDA0002021209980000072
Calculating a normalized credibility influence weight vector:
Figure GDA0002021209980000073
s205, calculating the reliability of the executive body A at the current moment as follows:
Figure GDA0002021209980000074
s206, according to the calculation process from the step S201 to the step S205, calculating to obtain the credibility of all the rest executives in the executives pool, sequencing the executives according to the credibility, and selecting the executives with high credibility to execute the service response task under the resource limited condition;
and S207, updating the historical event record queue according to the output result of each executive body at the current moment.
Fig. 2 is a schematic structural diagram of a functional equivalent executive reliability evaluation device according to an embodiment of the present invention. As shown in fig. 2, the apparatus includes: a queue initialization unit 201, a historical event record assignment unit 202, a credibility impact weight calculation unit 203, and an execution body credibility calculation unit 204. Wherein:
the queue initialization unit 201 is used for initializing the historical event record queue D maintained by the functional equivalent executive mmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current time, wherein M is 1,2, …, M and M represents the number of execution bodies in an execution pool; the historical event record assigning unit 202 is used for assigning at t according to the execution body miService response task execution result determination t of timeiHistorical event record d of time of dayi1,2,. and l; the reliability influence weight calculation unit 203 is used for determining t according to the set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi(ii) a The execution body credibility calculation unit 204 is used for calculating the credibility of the execution body according to tiHistorical event record d of time of dayiValue of and confidence impact weight wiAnd determining the reliability of the execution body m at the current moment.
Specifically, first, the queue initializing unit 201 initializes a history event record queue D for each execution body; then, for each executable, the historical event record assignment unit 202 assigns a value to each historical event record in the queue D according to the execution result of the service response task at the plurality of historical times; next, the reliability influence weight calculation unit 203 calculates an influence factor, i.e., a reliability influence weight, for each historical event record in order to distinguish the influence of different historical event records on the reliability; finally, the executive reliability calculation unit 204 calculates the reliability of the current executive according to the output of the historical event record assignment unit 202 and the output of the reliability influence weight calculation unit 203.
As an implementation manner, the historical event record assigning unit 202 is specifically configured to:
if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, if the two output results are consistent, the output result of the executive m is correct, and d is recordediB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number; in practical applications, b may be set to 1.
If tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0。
As an implementation manner, the credibility impact weight calculation unit 203 is specifically configured to:
calculating a historical event record queue D according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l.
As an implementation manner, the execution body credibility calculation unit is specifically configured to:
calculating the credibility B of the executive body m according to the formula (2)m
Figure GDA0002021209980000091
Wherein the content of the first and second substances,
Figure GDA0002021209980000092
representing normalized confidence impact weights.
On the basis of the foregoing embodiment, the device for assessing reliability of a functionally equivalent execution block according to an embodiment of the present invention further includes: an execution body ordering unit 205 and a queue updating unit 206. Wherein:
the executor sorting unit 205 is configured to sort all the executors in the executor pool according to the reliability, and schedule and select an executor with a high reliability to execute the service response task; the queue updating unit 206 is configured to update the historical event record queue of each executable according to the service response task execution result of each executable at the latest time.
It should be noted that the functional equivalent executive body reliability evaluation device provided in the embodiment of the present invention is for implementing the method described above, and the functions thereof may specifically refer to the method embodiment described above, and are not described herein again.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (4)

1. A functional equivalent executive body credibility assessment method is characterized by comprising the following steps:
step 1, initializing a historical event record queue D maintained by a function equivalent executive m in an executive pool of a mimicry defense systemmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current time, wherein M is 1,2, …, M and M represents the number of execution bodies in an execution pool;
step 2, according to the execution body m at tiService response task execution result determination t of timeiHistorical event record d of time of dayi1,2,. and l; the step 2 specifically comprises the following steps:
if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, and if the two output results are consistent, the output result of the executive m indicates the output result of the executive mCorrect fruit, remember diB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number;
if tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0;
Step 3, determining t according to a set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi(ii) a The step 3 specifically comprises the following steps:
calculating a historical event record queue D according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l;
step 4, according to tiHistorical event record d of time of dayiValue of and confidence impact weight wiDetermining the credibility of the executive m at the current moment; the step 4 specifically comprises the following steps:
calculating the credibility B of the executive body m according to the formula (2)m
Figure FDA0003018288600000021
Wherein the content of the first and second substances,
Figure FDA0003018288600000022
representing normalized confidence impact weights.
2. The method of claim 1, further comprising:
step 5, sequencing all executors in the executor pool according to the credibility, and scheduling and selecting the executors with high credibility to execute the service response task;
and 6, updating the historical event record queue of each executive according to the service response task execution result of each executive at the latest moment.
3. A functional equivalent executor credibility assessment apparatus, comprising:
a queue initialization unit for initializing the historical event record queue D maintained by the function equivalent executive body mmSaid historical event record queue DmThe method comprises the first l historical event records closest to the current time, wherein M is 1,2, …, M and M represents the number of execution bodies in an execution pool;
a historical event record assignment unit used for assigning t according to the execution body miService response task execution result determination t of timeiHistorical event record d of time of dayi1,2,. and l; the historical event record assigning unit is specifically configured to:
if tiThe executive m finishes the service response task at all times, the output result of the executive m is compared with the output result of the mimicry defense system, if the two output results are consistent, the output result of the executive m is correct, and d is recordediB; if the two output results are inconsistent, the output result of the execution body m is wrong, and d is recordedi-b is a real number;
if tiIf the executive m does not finish the service response task at the moment, the executive m is judged to execute the service response task overtime, and d is recordedi=0;
A confidence influence weight calculation unit for determining t according to the set weight calculation formulaiHistorical event record d of time of dayiIs influenced by the confidence weight wi(ii) a The reliability impact weight calculation unit is specifically configured to:
calculating a historical event record queue D according to equation (1)mIs influencing the weight vector Wm={w1,w2,...,wl}:
wi=1-(i-1)·a (1)
Wherein a is 1/l;
an execution body reliability calculation unit for calculating the reliability of the execution body according to tiHistorical event record d of time of dayiValue and confidence impact ofWeight wiDetermining the credibility of the executive m at the current moment; the executive confidence calculation unit is specifically configured to:
calculating the credibility B of the executive body m according to the formula (2)m
Figure FDA0003018288600000031
Wherein the content of the first and second substances,
Figure FDA0003018288600000032
representing normalized confidence impact weights.
4. The apparatus of claim 3, further comprising:
the executive sequencing unit is used for sequencing all executors in the executive pool according to the credibility and scheduling and selecting the executors with high credibility to execute the service response task;
and the queue updating unit is used for updating the historical event record queue of each executive according to the service response task execution result of each executive at the latest moment.
CN201910048265.1A 2019-01-18 2019-01-18 Functional equivalent executive body reliability assessment method and device Active CN109818951B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910048265.1A CN109818951B (en) 2019-01-18 2019-01-18 Functional equivalent executive body reliability assessment method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910048265.1A CN109818951B (en) 2019-01-18 2019-01-18 Functional equivalent executive body reliability assessment method and device

Publications (2)

Publication Number Publication Date
CN109818951A CN109818951A (en) 2019-05-28
CN109818951B true CN109818951B (en) 2021-08-03

Family

ID=66603534

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910048265.1A Active CN109818951B (en) 2019-01-18 2019-01-18 Functional equivalent executive body reliability assessment method and device

Country Status (1)

Country Link
CN (1) CN109818951B (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111163046B (en) * 2019-11-14 2022-01-21 中国人民解放军战略支援部队信息工程大学 Trust-based mimicry defense voting mechanism and system
CN111314337B (en) * 2020-02-11 2022-07-15 之江实验室 Mimicry scheduling method based on credibility and credibility coefficient
CN111556030B (en) * 2020-04-13 2022-06-10 南京理工大学 Mimicry defense dynamic scheduling method based on multi-stage queues
CN114301650B (en) * 2021-12-21 2022-08-30 浙江大学 Mimicry WAF (wide area filter) judging method based on credibility

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107395591A (en) * 2017-07-19 2017-11-24 中国人民解放军信息工程大学 The isomery degree appraisal procedure and system of a kind of function equivalence body set
CN107454082A (en) * 2017-08-07 2017-12-08 中国人民解放军信息工程大学 Secure cloud service construction method and device based on mimicry defence
CN108366049A (en) * 2018-01-15 2018-08-03 中国人民解放军战略支援部队信息工程大学 A kind of isomery function equivalence executes the implementation method of body
CN108900654A (en) * 2018-08-04 2018-11-27 中国人民解放军战略支援部队信息工程大学 A kind of DNS dynamic dispatching method based on mimicry name server
CN108989097A (en) * 2018-06-29 2018-12-11 中国人民解放军战略支援部队信息工程大学 A kind of mimicry system of defense threat warning method for visualizing and device
CN109067737A (en) * 2018-07-28 2018-12-21 中国人民解放军战略支援部队信息工程大学 A kind of mimicry judgment device and method exported under asynchronous Keep-order requirements

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120169771A1 (en) * 2009-07-23 2012-07-05 Nec Corporation Information presenting system, information presenting method, and storage medium
US9258321B2 (en) * 2012-08-23 2016-02-09 Raytheon Foreground Security, Inc. Automated internet threat detection and mitigation system and associated methods

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107395591A (en) * 2017-07-19 2017-11-24 中国人民解放军信息工程大学 The isomery degree appraisal procedure and system of a kind of function equivalence body set
CN107454082A (en) * 2017-08-07 2017-12-08 中国人民解放军信息工程大学 Secure cloud service construction method and device based on mimicry defence
CN108366049A (en) * 2018-01-15 2018-08-03 中国人民解放军战略支援部队信息工程大学 A kind of isomery function equivalence executes the implementation method of body
CN108989097A (en) * 2018-06-29 2018-12-11 中国人民解放军战略支援部队信息工程大学 A kind of mimicry system of defense threat warning method for visualizing and device
CN109067737A (en) * 2018-07-28 2018-12-21 中国人民解放军战略支援部队信息工程大学 A kind of mimicry judgment device and method exported under asynchronous Keep-order requirements
CN108900654A (en) * 2018-08-04 2018-11-27 中国人民解放军战略支援部队信息工程大学 A kind of DNS dynamic dispatching method based on mimicry name server

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
"拟态网络操作系统架构及关键技术研究";齐超;《中国博士学位论文全文数据库-信息科技辑》;20190115;全文 *
"网络空间拟态防御研究";邬江兴;《信息安全学报》;20161015;全文 *

Also Published As

Publication number Publication date
CN109818951A (en) 2019-05-28

Similar Documents

Publication Publication Date Title
CN109818951B (en) Functional equivalent executive body reliability assessment method and device
CN109857592B (en) Data recovery control method, server and storage medium
CN110011965B (en) Execution body complete non-uniform output arbitration method and device based on credibility
KR101589649B1 (en) System and method for analysing large-scale malignant code
CN108256706B (en) Task allocation method and device
US20140244563A1 (en) Operation information prediction computer, operation information prediction method and program
CN109344967B (en) Intelligent electric meter life cycle prediction method based on artificial neural network
CN112101674B (en) Resource allocation matching method, device, equipment and medium based on group intelligent algorithm
JP6189226B2 (en) Earthquake information distribution system and noise judgment method
CN111754051A (en) Traffic duration prediction processing method and device
JP7062474B2 (en) Deterioration status identification device, deterioration status identification method and program
JP2017045197A (en) Information processing apparatus, migration control program, and information processing system
CN111259404A (en) Toxic sample generation method, device, equipment and computer readable storage medium
US20230161687A1 (en) System and method for test selection according to test impact analytics
CN111176833A (en) Task allocation method and system for multiprocessing nodes
JP2008226179A (en) Business process estimation program, business process estimating method and business process estimating device
CN110049084B (en) Current limiting method, device and equipment of distributed system
CN110941545A (en) Method and device for processing regression test case based on defects and computing equipment
CN111769984A (en) Method for adding nodes in block chain network and block chain system
JP6981061B2 (en) Production plan generation program, production plan generation method and production plan generation device
CN115309520A (en) Task migration method and device, electronic equipment and storage medium
Wang et al. A novel metric for measuring operational effectiveness of a cybersecurity operations center
CN112422540B (en) Dynamic transformation method for executive body in mimicry WAF
CN113962712A (en) Method for predicting fraud gangs and related equipment
Raghunath et al. Prediction based dynamic resource provisioning in virtualized environments

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant