面向未知攻击感知的执行体细粒度调度算法.pdfVIP

学术论文

DOl:10.12379/j.issn.2096-1057.2025.06.09ResearchPapers

面向未知攻击感知的执行体细粒度调度算法

张涛陈璐张波席泽生汪晨何川

（国网智能电网研究院有限公司南京210003)

（电力网络安全防护与监测技术实验室南京210003）

(zhangtao@)

TheFine-grainedExecutorSchedulingAlgorithmforUnknown

AttacksPerception

ZhangTao,ChenLu,ZhangBo,XiZesheng,WangChen,andHeChuan

(StateGridSmartGridResearchInstituteCo.,Ltd.,Nanjing210003)

(StateGridLaboratoryofPowerCyber-SecurityProtectionandMonitoringTechnology,Nanjing210003)

AbstractAddressingsecuritythreatsfromunknownattacksexploitingsoftwareandsystem

vulnerabilitiesinpowergriddevicesoftenoverlookspotentialissueswithinoperatingsystemsand

communicationprotocolsattheprogramminglanguarglevel.Thispaperproposesafine-grained

schedulingalgorithmthatquantifiesthesimilarityofexecutioncomponentsandincorporates

parameterssuchasattacktimingandfrequencytoassesshistoricaltrustdeficit.Bycombining

similarityandhistoricaltrustdeficit,aquantitativealgorithmforredundantexecutionbody

heterogeneityisintroduced.Simulationexperimentsdemonstratethatthisalgorithmsignificantly

outperformsothermethodsindistinguishingexecutionbodysimilarity,effectivelyreducingthe

riskofexploitingsimilarvulnerabilitiesordefects,andminimizingredundantwastagefromsimilar

executionbodies.Thefailurerateremainsconsistentlybelow0.55,indicatingsuperiorpractical

performancecomparedtocommonlyusedalgorithms.

Keywordsmimicdefense;heterogeneousexecutionentity;schedulingalgorithm;similarity;

historicaltrustdeficit

摘要针对未知攻击利用电网设备特有的软件和系统漏洞构成的安全威胁，目前仅依赖编程语言

层面的拟态防御技术忽略了操作系统和通信协议中的潜在问题，提出了一种细粒度的调度算法.该

算法通过精细量化执行体的组件类别相似度，并在调度策略中引入攻击时间和频率等参数，评估执

行体的历史失信度.最终，结合相似度和历史失信度，提出了一种允余执行体综合异构性的量化算法.

仿真实验表明，该算法在执行体相似性区分上显著优于其他算法，有效