Research on bionic mechanism based endogenous security defense system

Aiqun HU; Lanting FANG; Tao LI

doi:10.11959/j.issn.2096-109x.2021002

您当前的位置：

首页 >

文章列表页 >

Research on bionic mechanism based endogenous security defense system

Topic Ⅰ: Security Architecture Applications of Novel Network | 更新时间：2024-06-03

- Research on bionic mechanism based endogenous security defense system
- Chinese Journal of Network and Information Security Vol. 7, Issue 1, Pages: 11-19(2021)
- 作者机构：
  
  1. 东南大学网络空间安全学院，江苏南京 210096
  2. 紫金山实验室，江苏南京 211100
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021002
  CLC： TP309.1
- Online First：2021-02，
  
  Published：15 February 2021
- 稿件说明：
移动端阅览
Aiqun HU, Lanting FANG, Tao LI. Research on bionic mechanism based endogenous security defense system[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 11-19.
DOI：

Aiqun HU, Lanting FANG, Tao LI. Research on bionic mechanism based endogenous security defense system[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 11-19. DOI： 10.11959/j.issn.2096-109x.2021002.

摘要

针对防火墙、入侵检测、防病毒等外壳式防御技术来不及检测、分析和过滤恶意流量，防御机制没有与网络设备的安全状态关联，导致安全效能低的问题，提出一种基于仿生机理的内生安全防御体系。模仿生物体的高效安全防御机理，在设计和建造信息系统时，将巨量安全机制部署进入网络的每一个安全部件中，通过网络互联将所有节点中的安全组件关联在一起，对网络进行全面、深度的安全态势感知和防御，并通过人工智能“大脑”不断地自主学习和演进，提升发现未知威胁和自动处理威胁的能力。通过构建全新的内生安全防御体系，将安全体系和信息系统高度融合，能够解决现有信息系统防御效率低、无法处理高速率数据、不能应对未知威胁等问题，使网络具有“与生俱来、自主成长”的安全防御能力，满足“业务高可用、安全高效率”的信息系统发展需求。

Abstract

Shell-based security defense technologies such as firewall

intrusion detection and anti-virus cannot be updated in a timely fashion upon identification of attacks.The security defense mechanism is not associated with the security status of network devices

resulting in low security performance.To solve the above problems

an endogenous security defense system based on the bionic security mechanism was proposed.Firstly

imitating the security defense mechanism of the organism

the endogenous security system integrated the security component with each other at the construction process.Secondly

the endogenous security associates all security components through network interconnection

and proposed a defense in depth and comprehensive approach to increase the security of a system.Finally

through the self-learning

endogenous security's ability of threat detection was continuous enhanced.By integrating the security system and information system

an endogenous security defense system was constructed.The endogenous security defense system can handle the challenges such as low defensive efficiency ratio

high-speed data processing

and unknown threats detection.The endogenous security system is an efficient security defense system of “innate growth and independent growth”.It meets the development needs of information systems with “high availability

security and high efficiency”.

关键词

Keywords

references

YAN Q , YU F R , GONG Q , et al . Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 18 ( 1 ): 602 - 622 .

WANG K , DU M , MAHARJAN S , et al . Strategic honeypot game model for distributed denial of service attacks in the smart grid [J ] . IEEE Transactions on Smart Grid , 2017 , 8 ( 5 ): 2474 - 2482 .

徐明迪 , 高杨 , 崔峰 . 基于 SDN 的分布式欺骗防御系统 [J ] . 通信学报 , 2018 , 39 ( A2 ): 54 - 60 .

XU M D , GAO Y , CUI F . Distributed deception defense system based on SDN [J ] . Journal on Communications , 2018 , 39 ( A2 ): 54 - 60 .

SAIED A , OVERILL R E , RADZIK T . Detection of known and unknown DDoS attacks using artificial neural networks [J ] . Neurocomputing , 2016 , 172 : 385 - 393 .

XU W , HU G , HOD W , et al . Distributed secure cooperative control under denial-of-service attacks from multiple adversaries [J ] . IEEE Transactions on Cybernetics , 2019 : 1 - 10 .

FORREST S , HOFMEYR S A , SOMAYAJI A.et al . A sense of self for UNIX processes [C ] // In Proceedings of the 1996 IEEE Symposium on Security and Privacy . 1996 : 120 - 128 .

GONZALEZ D . An immunogenetic approach to intrusion detection [R ] . 2001 .

BENTLEY K , . The artificial immune model for network intrusion detection [C ] // The 7th EUFIT'99 . 1999 .

LUO W J , ZHANG S H , LIANG W , et al . NIDS research advance based on artificial immunology [J ] . Journal of University of Science and Technology of China , 2002 , 22 ( 5 ): 520 - 531 .

BECK G , HABICHT G S . Immunity and the inverte-brates [J ] . Scientific American , 1996 , 275 ( 5 ): 60 - 66 .

周建国 . 网络入侵检测的免疫学建模及其仿真研究 [D ] . 北京:北京航空航天大学 , 2002 .

ZHOU J G . Simalation and modeling of immunology network in-trinsion detection [D ] . Beijing:Beijing University , 2002 .

Mimic octopus Wikipedia,the free encyclopedia [EB ] .

邬江兴 . 网络空间拟态防御研究 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 1 - 10 .

WU J X . Research on cyber mimic defense [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 1 - 10 .

HU H C , WU J X , WANG Z P , et al . Mimic defense:a designed-in cybersecurity defense framework [J ] . IET Information Security , 2017 , 12 ( 3 ): 226 - 237 .

HU H C , WANG Z P , CHENG G Z , et al . MNOS:a mimic network operating system for software defined networks [J ] . IET Information Security , 2017 , 11 ( 6 ): 345 - 355 .

BUCZAK A , GUVEN E . A survey of data mining and machine learning methods for cyber security intrusion detection [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 18 ( 2 ): 1153 - 1176 .

HAREL Y , GAL I B , ELOVICI Y . Cyber security and the role of intelligent systems in addressing its challenges [J ] . ACM Transactions on Intelligent Systems and Technology , 2017 , 8 ( 4 ): 49 .

DONG Y , HAN Q L . Guest editorial special issue on new trends in energy internet:artificial intelligence-based control,network security,and management [J ] . IEEE Transactions on Systems,Man,and Cybernetics , 2019 , 49 ( 8 ): 1551 - 1553 .

JESCHKE S , BRECHER C , SONG H B , et al . Industrial internet of things and cyber manufacturing systems [M ] . Springer International Publishing , 2017 : 3 - 19 .

张焕国 , 韩文报 , 来学嘉 , 等 . 网络空间安全综述 [J ] . 中国科学:信息科学 , 2016 , 46 ( 2 ): 125 - 164 .

ZHANG H G , HAN W B , LAI X J , et al . Cyber security over-view [J ] . Science China:Information Science , 2016 , 46 ( 2 ): 125 - 164 .

VINCENT L , TANNER A , BLARER A . Gaining an edge in cyberspace with advanced situational awareness [J ] . IEEE Security ＆Privacy , 2015 , 13 ( 2 ): 65 - 74 .

李艳 , 王纯子 , 黄光球 , 等 . 网络安全态势感知分析框架与实现方法比较 [J ] . 电子学报 , 2019 , 47 ( 4 ): 927 - 945 .

LI Y , WANG C Z , HUANG G Q , et al . A survey of architecture and implementation method on cyber security situation awareness analysis [J ] . Acta Electronica Sinica , 2019 , 47 ( 4 ): 927 - 945 .

POO M M , DU J L , LP N Y , et al . China brain project:basic neuroscience,brain diseases,and brain-inspired computing [J ] . Neuron , 2016 , 92 : 591 - 596 .

BUNDY A . Review of preparing for the future of artificial intelligence [J ] . AI and Society , 2017 , 32 ( 2 ): 285 - 287 .

PAN Y H . Heading toward artificial intelligence 2.0 [J ] . Engineering , 2016 , 2 ( 4 ): 409 - 413 .

PAN Y H.Special issue on artificial intelligence 2 . 0 [J ] . Frontiers of Information Technology ＆ ElectronicEngineering , 2017 , 18 : 1 - 2

蒲慕明 , 徐波 , 谭铁牛 . 脑科学与类脑研究概述 [J ] . 中国科学院院刊 , 2016 , 31 ( 7 ): 725 - 736 .

PU M M , XU B , TAN T N . Brain science and brain-inspired intel-ligence technology-an overview [J ] . Bulletin of Chinese Academy of Sciences , 2016 , 31 ( 7 ): 725 - 736 .

Views

647

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on intrusion detection model based on synchronization of heterogenous executer

Intrinsic assurance: a systematic approach towards extensible cybersecurity

Preliminary study on the reform of machine learning teaching

Related Author

Yu Hong

ZHU Zhengbin

WEI Shuai

GUO Wei

LAN Julong

Xunxun CHEN

Mingzhe LI

Ning LYU

Related Institution

Information Engineering University

Songshan Laboratory

National Computer Network Emergency Response Technical Team/Coordination Center of China

Chang'an Communication Technology Co., Ltd.

⁰