面向云应用的拟态云服务架构

Mimic cloud service architecture for cloud applications

针对单执行体的云应用服务缺乏异构性和动态性,难以应对未知漏洞和后门的安全威胁问题,提出一种拟态云服务架构,把云平台向用户提供的应用服务节点构造成基于拟态防御技术的服务包,使应用服务具有拟态构造带来的内生安全特性和鲁棒性,同时讨论了策略调度和裁决机制等两项关键的拟态云服务运行机制。经实验分析表明,拟态云服务具有较好的安全性,可以通过减小执行体的性能差异降低其响应时延。

In order to solve the problem of the lack of heterogeneity and dynamics of cloud application services with a single executor,and the difficulty of dealing with the security threats of unknown vulnerabilities and backdoors,a mimic cloud service architecture was proposed.In this architecture,the application services provided by the cloud platform were constructed into a service package based on mimic defense technology,so that the application services had the endogenous security features and robustness brought by mimic structure.At the same time,two key mimic cloud services operating mechanism,policy scheduling and adjudication mechanism were discussed.The experimental results and analysis show that the mimic cloud service obtains better security and its response time delay can be reduced by reducing the performance difference of the executor.