| 容器云中基于Stackelberg博弈的动态异构调度方法 |
| |
| 引用本文： | 曾威,扈红超,李凌书,霍树民. 容器云中基于Stackelberg博弈的动态异构调度方法[J]. 网络与信息安全学报, 2021, 7(3): 95-104. DOI: 10.11959/j.issn.2096-109x.2021063 |
| |
| 作者姓名： | 曾威 扈红超 李凌书 霍树民 |
| |
| 作者单位： | 信息工程大学，河南 郑州 450001 |
| |
| 基金项目： | 国家重点研发计划(2018YFB0804004);国家自然科学基金(62002383) |
| |
| 摘 要： | 容器技术以其灵活、高效的特性促进了云计算的快速发展,但同时引入了如同驻攻击、逃逸攻击和共模攻击等安全威胁.针对这些安全威胁,提出一种容器云中基于Stackelberg博弈的动态异构式调度方法.首先,构建异构镜像资源池以抑制云上基于共模漏洞的攻击扩散;进而,将攻防交互过程建模为Stackelberg博弈模型;最后,对攻防...
|
| 关 键 词： | 云安全 容器调度 Stackelberg博弈 移动目标防御 |
Dynamic heterogeneous scheduling method based on Stackelberg game model in container cloud |
| |
| Wei ZENG,Hongchao HU,Lingshu LI,Shumin HUO. Dynamic heterogeneous scheduling method based on Stackelberg game model in container cloud[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 95-104. DOI: 10.11959/j.issn.2096-109x.2021063 |
| |
| Authors: | Wei ZENG Hongchao HU Lingshu LI Shumin HUO |
| |
| Affiliation: | Information Engineering University, Zhengzhou 450001, China |
| |
| Abstract: | Container technology promotes the rapid development of cloud computing with its flexible and efficient features, but it also introduces security threats such as co-resident attacks, escape attacks, and common mode attacks.In response to these security threats, a dynamic heterogeneous scheduling method based on Stackelberg game in the container cloud was proposed.First, a heterogeneous mirrored resource pool is constructed to suppress the spread of attacks based on common-mode vulnerabilities on the cloud.Then, the offensive and defense interaction process is modeled as a Stackelberg game model.Finally, the offensive and defensive model is analyzed, and the system scheduling problem is modeled as a mixed integer non-linear programming problem to solve the system's optimal scheduling strategy.Experiments show that the proposed method can improve the defense effect of the cloud platform and reduce the system defense overhead. |
| |
| Keywords: | cloud security container scheduling Stackelberg game moving target defense |
| 本文献已被 维普 等数据库收录！ |
| 点击此处可从《网络与信息安全学报》浏览原始摘要信息 |
|
点击此处可从《网络与信息安全学报》下载免费的PDF全文 |
