基于仿生机理的内生安全防御体系研究

胡爱群; 方兰婷; 李涛

doi:10.11959/j.issn.2096-109x.2021002

您当前的位置：

首页 >

文章列表页 >

基于仿生机理的内生安全防御体系研究

专题Ⅰ：新型网络安全架构与应用 | 更新时间：2024-06-03

- 基于仿生机理的内生安全防御体系研究
- Research on bionic mechanism based endogenous security defense system
- 网络与信息安全学报 2021年7卷第1期页码：11-19
- 作者机构：
  
  1. 东南大学网络空间安全学院，江苏南京 210096
  2. 紫金山实验室，江苏南京 211100
- 作者简介：
  
  [ "胡爱群（1964- ），男，江苏如皋人，博士，东南大学教授、博士生导师，主要研究方向为网络与信息安全、移动通信安全技术。" ]
  [ "方兰婷（1990- ），女，安徽六安人，博士，东南大学讲师，主要研究方向为内生安全技术、数据挖掘技术、人工智能技术。" ]
  [ "李涛（1984- ），男，江苏镇江人，博士，东南大学讲师，主要研究方向为安全评估、移动终端防护。" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(6162520);至善青年学者支持计划;Youth Scholar Program of SEU
- DOI：10.11959/j.issn.2096-109x.2021002
  中图分类号： TP309.1
- 网络首发：2021-02，
  
  纸质出版：2021-02-15
- 稿件说明：
移动端阅览
胡爱群, 方兰婷, 李涛. 基于仿生机理的内生安全防御体系研究[J]. 网络与信息安全学报, 2021,7(1):11-19.

Aiqun HU, Lanting FANG, Tao LI. Research on bionic mechanism based endogenous security defense system[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 11-19.
胡爱群, 方兰婷, 李涛. 基于仿生机理的内生安全防御体系研究[J]. 网络与信息安全学报, 2021,7(1):11-19. DOI： 10.11959/j.issn.2096-109x.2021002.

Aiqun HU, Lanting FANG, Tao LI. Research on bionic mechanism based endogenous security defense system[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 11-19. DOI： 10.11959/j.issn.2096-109x.2021002.

摘要

针对防火墙、入侵检测、防病毒等外壳式防御技术来不及检测、分析和过滤恶意流量，防御机制没有与网络设备的安全状态关联，导致安全效能低的问题，提出一种基于仿生机理的内生安全防御体系。模仿生物体的高效安全防御机理，在设计和建造信息系统时，将巨量安全机制部署进入网络的每一个安全部件中，通过网络互联将所有节点中的安全组件关联在一起，对网络进行全面、深度的安全态势感知和防御，并通过人工智能“大脑”不断地自主学习和演进，提升发现未知威胁和自动处理威胁的能力。通过构建全新的内生安全防御体系，将安全体系和信息系统高度融合，能够解决现有信息系统防御效率低、无法处理高速率数据、不能应对未知威胁等问题，使网络具有“与生俱来、自主成长”的安全防御能力，满足“业务高可用、安全高效率”的信息系统发展需求。

Abstract

Shell-based security defense technologies such as firewall

intrusion detection and anti-virus cannot be updated in a timely fashion upon identification of attacks.The security defense mechanism is not associated with the security status of network devices

resulting in low security performance.To solve the above problems

an endogenous security defense system based on the bionic security mechanism was proposed.Firstly

imitating the security defense mechanism of the organism

the endogenous security system integrated the security component with each other at the construction process.Secondly

the endogenous security associates all security components through network interconnection

and proposed a defense in depth and comprehensive approach to increase the security of a system.Finally

through the self-learning

endogenous security's ability of threat detection was continuous enhanced.By integrating the security system and information system

an endogenous security defense system was constructed.The endogenous security defense system can handle the challenges such as low defensive efficiency ratio

high-speed data processing

and unknown threats detection.The endogenous security system is an efficient security defense system of “innate growth and independent growth”.It meets the development needs of information systems with “high availability

security and high efficiency”.

关键词

Keywords

references

YAN Q , YU F R , GONG Q , et al . Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 18 ( 1 ): 602 - 622 .

WANG K , DU M , MAHARJAN S , et al . Strategic honeypot game model for distributed denial of service attacks in the smart grid [J ] . IEEE Transactions on Smart Grid , 2017 , 8 ( 5 ): 2474 - 2482 .

徐明迪 , 高杨 , 崔峰 . 基于 SDN 的分布式欺骗防御系统 [J ] . 通信学报 , 2018 , 39 ( A2 ): 54 - 60 .

XU M D , GAO Y , CUI F . Distributed deception defense system based on SDN [J ] . Journal on Communications , 2018 , 39 ( A2 ): 54 - 60 .

SAIED A , OVERILL R E , RADZIK T . Detection of known and unknown DDoS attacks using artificial neural networks [J ] . Neurocomputing , 2016 , 172 : 385 - 393 .

XU W , HU G , HOD W , et al . Distributed secure cooperative control under denial-of-service attacks from multiple adversaries [J ] . IEEE Transactions on Cybernetics , 2019 : 1 - 10 .

FORREST S , HOFMEYR S A , SOMAYAJI A.et al . A sense of self for UNIX processes [C ] // In Proceedings of the 1996 IEEE Symposium on Security and Privacy . 1996 : 120 - 128 .

GONZALEZ D . An immunogenetic approach to intrusion detection [R ] . 2001 .

BENTLEY K , . The artificial immune model for network intrusion detection [C ] // The 7th EUFIT'99 . 1999 .

LUO W J , ZHANG S H , LIANG W , et al . NIDS research advance based on artificial immunology [J ] . Journal of University of Science and Technology of China , 2002 , 22 ( 5 ): 520 - 531 .

BECK G , HABICHT G S . Immunity and the inverte-brates [J ] . Scientific American , 1996 , 275 ( 5 ): 60 - 66 .

周建国 . 网络入侵检测的免疫学建模及其仿真研究 [D ] . 北京:北京航空航天大学 , 2002 .

ZHOU J G . Simalation and modeling of immunology network in-trinsion detection [D ] . Beijing:Beijing University , 2002 .

Mimic octopus Wikipedia,the free encyclopedia [EB ] .

邬江兴 . 网络空间拟态防御研究 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 1 - 10 .

WU J X . Research on cyber mimic defense [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 1 - 10 .

HU H C , WU J X , WANG Z P , et al . Mimic defense:a designed-in cybersecurity defense framework [J ] . IET Information Security , 2017 , 12 ( 3 ): 226 - 237 .

HU H C , WANG Z P , CHENG G Z , et al . MNOS:a mimic network operating system for software defined networks [J ] . IET Information Security , 2017 , 11 ( 6 ): 345 - 355 .

BUCZAK A , GUVEN E . A survey of data mining and machine learning methods for cyber security intrusion detection [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 18 ( 2 ): 1153 - 1176 .

HAREL Y , GAL I B , ELOVICI Y . Cyber security and the role of intelligent systems in addressing its challenges [J ] . ACM Transactions on Intelligent Systems and Technology , 2017 , 8 ( 4 ): 49 .

DONG Y , HAN Q L . Guest editorial special issue on new trends in energy internet:artificial intelligence-based control,network security,and management [J ] . IEEE Transactions on Systems,Man,and Cybernetics , 2019 , 49 ( 8 ): 1551 - 1553 .

JESCHKE S , BRECHER C , SONG H B , et al . Industrial internet of things and cyber manufacturing systems [M ] . Springer International Publishing , 2017 : 3 - 19 .

张焕国 , 韩文报 , 来学嘉 , 等 . 网络空间安全综述 [J ] . 中国科学:信息科学 , 2016 , 46 ( 2 ): 125 - 164 .

ZHANG H G , HAN W B , LAI X J , et al . Cyber security over-view [J ] . Science China:Information Science , 2016 , 46 ( 2 ): 125 - 164 .

VINCENT L , TANNER A , BLARER A . Gaining an edge in cyberspace with advanced situational awareness [J ] . IEEE Security ＆Privacy , 2015 , 13 ( 2 ): 65 - 74 .

李艳 , 王纯子 , 黄光球 , 等 . 网络安全态势感知分析框架与实现方法比较 [J ] . 电子学报 , 2019 , 47 ( 4 ): 927 - 945 .

LI Y , WANG C Z , HUANG G Q , et al . A survey of architecture and implementation method on cyber security situation awareness analysis [J ] . Acta Electronica Sinica , 2019 , 47 ( 4 ): 927 - 945 .

POO M M , DU J L , LP N Y , et al . China brain project:basic neuroscience,brain diseases,and brain-inspired computing [J ] . Neuron , 2016 , 92 : 591 - 596 .

BUNDY A . Review of preparing for the future of artificial intelligence [J ] . AI and Society , 2017 , 32 ( 2 ): 285 - 287 .

PAN Y H . Heading toward artificial intelligence 2.0 [J ] . Engineering , 2016 , 2 ( 4 ): 409 - 413 .

PAN Y H.Special issue on artificial intelligence 2 . 0 [J ] . Frontiers of Information Technology ＆ ElectronicEngineering , 2017 , 18 : 1 - 2

蒲慕明 , 徐波 , 谭铁牛 . 脑科学与类脑研究概述 [J ] . 中国科学院院刊 , 2016 , 31 ( 7 ): 725 - 736 .

PU M M , XU B , TAN T N . Brain science and brain-inspired intel-ligence technology-an overview [J ] . Bulletin of Chinese Academy of Sciences , 2016 , 31 ( 7 ): 725 - 736 .

浏览量

647

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于异构执行体同步控制的入侵检测模型研究

内禀安全：网络安全能力体系化构建方法

本科“机器学习”课程教学改革初探