一种 HSS移动目标防御方法

摘要

针对现有移动核心网中HSS面临的中间人攻击、DoS攻击等安全威胁，以及传统静态网络中攻击者对防御者的不对称性优势，在移动目标防御中动态地址的研究基础上提出一种HSS移动目标防御方法。对攻击源筛选问题进行建模分析，提出快速贪心算法和凸优化法高效地执行地址切换策略。仿真结果表明，快速贪心算法在阻断攻击源的同时大幅降低了时间复杂度；凸优化法通过增大求解空间减少了执行地址切换次数，降低了对核心网正常通信的影响。%In current mobile core network,HSS is facing deny of service attack,man in middle attack and other security threats.Besides,in traditional static networks,attackers have asymmetric advantages over defenders.To address the prob-lems,this paper presented a moving target defense approach of HSS based on the study of dynamic address in moving target de-fense.It also modeled and analysed the attacker-filter problem and proposed a fast greedy algorithm and a convex optimization method to efficiently perform the address switch strategy.The simulation results show that the fast greedy algorithm prevents at-tackers while significantly reducing the time complexity;the convex optimization method reduces the times of address switch byincreasing solution space and lowers the impact on normal communication of core network.