通信网络动目标防御技术研究

摘要

论述了通信网络动目标防御(MTD)概念,从攻击面特征及动目标防御功能性内涵的角度,对现有动目标防御技术进行了归类和分析.在现有研究的基础上设计了基于端信息跳变的动目标防御系统,并对其抗攻击性能进行了分析.该系统能通过通信过程中持续变化攻击面增大攻击成本、复杂度和降低攻击成功率,从根本上提高防御攻击的性能.该研究可为多机制结合的动目标防御系统的设计与实现提供理论基础.%The concept of moving target defense ( MTD) of communication networks is interpreted, and the existing mov-ing target defense techniques are classified and analyzed from the angles of attack surface feature and functional connotation of moving target defense.A moving target defense system based on end hopping is designed on the basis of the study of present techniques of moving target denfense, and its anti-attack performance is analyzed.The sys-tem increases the attack cost and complexity and decreases the attack sucess ratge by continually changing the at -tack surface, thus its attack defense performance can be radically improved.This study can provide the theoretical basis for design and implementation of multi-mechanism moving target defense systems.