Abstract:Cyberspace mimic defense (CMD) is an active defense theory that has emerged in recent years. By dynamically constructing and scheduling multiple executors, the CMD can not only effectively defend against security threats caused by unknown cyberspace weaknesses, but also improve the present situation of information asymmetry between attackers and defenders in cyberspace. However, as one of the key technologies of the CMD, the scheduling strategy algorithm still needs to be improved in real-time security, reliability, and universality, which has restricted the development and large-scale deployment of the CMD. To solve this problem, we propose an optimal seed scheduling strategy algorithm (OSSSA) in this paper. After using continuous-time Markov processes to mathematically analyze the model of the mimic defense system in cyberspace, we introduce the key factors and their evaluation methods that affecting the CMD defense performance in the OSSSA, then propose a reliable working mechanism of the OSSSA. Furthermore, we present an evaluation method that can effectively evaluate the defense performance of the scheduling algorithms. Experimental results from software simulations and real experiments show that the OSSSA has better real-time defense performance than the current mainstream scheduling strategy algorithms, and can adapt to different practical application scenarios, which is helpful to the further development of the CMD.

Research on Executive Control Strategy of Mimic Web Defense Gateway

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Scheduling Sequence Control Method Based on Sliding Window in Cyberspace Mimic Defense

An Adaptive Multiexecutors Scheduling Algorithm Based on Heterogeneity for Cyberspace Mimic Defense

Optimal Strategy for Cyberspace Mimic Defense Based on Game Theory

An Optimal Seed Scheduling Strategy Algorithm Applied to Cyberspace Mimic Defense

A Multipath Resource Updating Approach for Distributed Controllers in Software-Defined Network

Optimal Strategy Selecting Method for Mimic Defense Based on Incomplete Information Dynamic Game

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

Research on Real-Time Scheduling Strategy for Transient Fault Tolerance in Nc System

Scientific Workflow Execution System Based on Mimic Defense in the Cloud Environment.

Mimic Defense Technology

Original Meaning and Vision of Mimic Defense

A Framework for Mimic Defense System in Cyberspace

Research on Cyber Mimic Defense

Research on Cyberspace Mimic Defense Based on Dynamic Heterogeneous Redundancy Mechanism

An Input-Aware Mimic Defense Theory and its Practice

MimicCloudSim: an Environment for Modeling and Simulation of Mimic Cloud Service

Performance Modeling Based on GSPN and Markov for Cyberspace Mimic Defense System

A function-aware mimic defense theory and its practice

Design and Implementation of Mimic Defense Web Server