Security analysis method for mimicry defense architecture

Abstract

The invention discloses a security analysis method for a mimicry defense architecture. The method comprises the following steps: defining the dynamic transformation period of an executor in a securityanalysis model, the time required for successful attack implementation, the probability that the executor shows difference after being attacked, and the probability that an attacker successfully transfers the attack; analyzing the security of the single redundancy defense architecture; obtaining the probability of invading the input proxy component, the probability that the attack continues to stay in the input agent component, the probability that the attack invades into the heterogeneous execution body set from the input agent component, the probability that the attack continues to stay inthe heterogeneous execution body set, the probability that the attack invades into the voter component from the heterogeneous execution body set and the probability that an attacker successfully invades into the voter component from the input agent component are set; and analyzing the security of the n redundancy defense architecture to obtain general values corresponding to the six probability values. According to the method, different parameters are used for analyzing the security defense effectiveness of the mimicry defense system, and a theoretical analysis basis is provided for the security of the mimicry defense model.

Description

technical field [0001] The invention belongs to the technical field of cyberspace security, in particular to a security analysis method for a mimic defense architecture. Background technique [0002] At present, the existing global Internet space is full of loopholes, and information systems connected to the network are easily invaded by illegal persons. In order to ensure the security of an information system, the system must have confidentiality, integrity and availability, so experts and scholars have proposed a series of methods to ensure the realization of these characteristics of the information system. [0003] Existing defense technologies can only respond effectively on the premise of discovering the attack characteristics of the attacker or the abnormal response of the attack target, and there is no solution for those attack methods that have not been detected yet. The limitations of existing defense methods lead to frequent occurrence of network security incident...

AI Technical Summary

Problems solved by technology

In response to this situation, Academician Wu Jiangxing proposed the cyberspace mimicry defense theory, which reversed the passive situation of network security defenders. However, there is currently no corresponding theory to study the security of mimicry defense, which makes the mimicry defense model lack the theoretical support of security.

Images