一种基于国产密码与拟态防御融合的一体化内生安全防护架构

An Integrated Endogenous Security Protection Architecture Based on the Fusion of Domestic Cryptography and Mimic Defense

目前,随着网络安全风险的与日俱增,网络威胁已进入未知威胁时代。针对网络系统所面临的“正门”和“旁路”双重威胁,提出了基于国产密码与拟态防御融合的一体化内生安全防御架构,在传统的拟态防御内生安全架构中引入国产密码和安全认证,使得系统能提前感知到执行体异常事件,进而获得内生安全增益。同时针对工业控制系统安全,提出了面向内生安全工业控制器的基于国产密码改造方案,以增强系统的安全性和可靠性。

Currently,with the increasing risks of network security,network threats have entered the era of unknown threats.Aiming at the dual threats of"main gate"and"bypass"to network systems,a dynamic redundancy model is proposed to integrate domestic cryptography and mimetic defense.This paper introduces domestic cryptography and security authentication into the traditional mimetic defense endogenous security architecture,which enable the system to perceive abnormal events of the execution body in advance and thus obtain endogenous security gains.Meanwhile,for industrial control system security,a domestic cryptography transformation scheme for endogenous security industrial controllers is proposed to enhance the security and reliability of the system.