Output difference feedback and system benefit control based dynamic heterogeneous redundancy architecture

Abstract

Mimic active defense technology effectively disrupts attack routes and reduces the probability of successful attacks by using a dynamic heterogeneous redundancy (DHR) architecture. However, current approaches often overlook the adaptability of the adjudication mechanism in complex and variable network environments, focusing primarily on system security while neglecting performance considerations. To address these limitations, we propose an output difference feedback and system benefit control based DHR architecture. This architecture introduces an adjudication mechanism based on output difference feedback, which enhances adaptability by considering the impact of each executor’s output deviation on the global decision. Additionally, the architecture incorporates a scheduling strategy based on system benefit, which models the quality of service and switching overhead as a bi-objective optimization problem, balancing security with reduced computational costs and system overhead. Simulation results demonstrate that our architecture improves adaptability towards different network environments and effectively reduces both the attack success rate and average failure rate.

摘要

拟态主动防御技术通过引入动态异构冗余架构来有效扰乱攻击路线, 降低攻击成功率。 然而, 现有方法忽略裁决机制在复杂可变网络环境中的适应性, 往往聚焦系统安全性而忽视系统性能。 为解决前述局限, 本文提出一种基于输出差异反馈和系统效益控制的动态异构冗余架构。 该架构引入一种基于输出差异反馈的裁决机制, 通过量化各执行体输出偏差对全局裁决结果的影响来增强适应性。 此外, 该架构结合一种基于系统效益的调度策略, 将服务质量和切换开销建模为双目标优化问题, 在降低计算成本和系统开销的同时平衡系统安全。 仿真结果表明, 该架构增强了对不同网络环境的适应能力, 有效降低了攻击成功率和平均裁决失败率。