类生物免疫机制的网络安全架构

Biological immunology-inspired network security architecture

复杂生物的免疫系统在自然界演化了数亿年,形成了精妙的防御体系来保护生物体免受病原体的侵害。受生物免疫机制的启发,在扼要分析未来网络面临的安全挑战及其主要根源的基础上,重点阐述了生物免疫系统对网络安全的启示。文章在提出科学平衡的安全观基础上,介绍了类生物免疫机制的网络安全架构初步设计。该架构通过协同感知实现快速自适应阻断隔离,以及通过在平行伴生网络中进行对抗学习,去发现应对已知甚至未知攻击的网络疫苗,从而获得网络空间的对抗优势。

The biological immune system has evolved billions of years in nature and forms several exquisite defense mechanisms to protect the organism from pathogens.Inspired by the biological immunology,this paper first presents the challenges and causes of network security in the future network.Then the inspirations for network security acquired from immunology are highlighted.After distilling a scientific view of security,this paper introduces the biological immunology-inspired network security architecture.This architecture can achieve fast response by leveraging collaborative awareness and construct network vaccines for known and unknown attacks in advance by using adversarial learning in the parallel adjoint network,which can acquire a competitive advantage.