动态异构冗余数据保护安全架构

Dynamic Heterogeneous and Redundancy Data Protection Architecture

针对传统数据保护方法难以应对未知的漏洞和后门等安全问题,提出一种基于拟态防御思想的动态异构冗余数据保护安全架构--拟态数据安全架构(Mimic Data Security,MDS),用以提升数据服务的安全性.首先,根据拟态防御技术的工作原理构造异构冗余的执行体资源池;然后,利用具有选调器、控制器、输入代理和裁决器等功能模块组成的中心控制器实现对异构冗余执行体的动态调度,并对在线执行体集的输出结果的进行多模裁决处理,用以提升系统的安全性和可靠性.仿真实验结果表明,对比传统静态架构,具有动态随机等特性的MDS架构具有更高的安全性能.

The traditional data protection methods can not deal with the unknown security threats. Thus,a dynamic,heterogeneous and redundancy data protection architecture based on mimic defense is proposed. Firstly,the execution bodies pool are given according to the working characteristics of mimic defense. Secondly,the center scheduler is used to realize the dynamic scheduling of execution bodies and the multi-mode decision processing of output results. Thus,the security and reliability of the system have been improved.The experimental results show that the newarchitecture has better security performance than traditional architectures. Therefore,the benefits of deploying newarchitectures are superior to traditional architectures.