一种基于动态防御的服务功能链安全保障机制

A Security Mechanism of Service Function Chain Based on Dynamic Defense

基于移动目标防御技术,研究了虚拟功能服务链在网络环境中面临的攻击威胁,利用合作博弈理论设计了服务链资源安全调度模型和算法。首先介绍了动态防御技术中攻击面的概念,在此基础上建立服务链攻击面度量指标,并设计攻击面转移方法。然后基于合作博弈方法建立服务链攻击面转移模型和开销优化函数。最后给出服务链安全资源调度算法和仿真验证结果。

Based on moving targets defense technology,the attacking threat to virtual function service chains in network is studied and the safe scheduling model and algorithm of service chain resourcesis are designed by using cooperative game theory.Firstly,the conception of attack surface of moving targets defense technologyis is introduced.Based on the above,the measure index of service chain attack surfaceis is built,and the methods of attack surface transfer are given.Then,the model of attack surface transfer and the optimization function of cost based on cooperative game theory are given.At last,some numerical results of attack surface transfer model and safe scheduling algorithm of service chain resources algorithm are presented.