基于区块链的网络级移动目标防御系统设计

网络级移动目标防御技术是应对诸如泛洪攻击等攻击手段的有效方式.但现有网络级移动目标防御系统多采用单一静态中央控制器,这种集中式的管理架构易带来单点故障以及数据不可信等风险.针对上述问题,本文提出一种基于区块链的网络级移动目标防御方案,通过PoW共识机制实现中央控制器的动态切换,解决集中式中央控制器带来的单点故障问题并提...

Design of Network-level Moving Target Defense System Based on Blockchain

The network-level moving target defense is an effective approach to deal with the cyber attacks, like flooding attack. However, the existing network-level moving target defense systems mostly adopt the static central controller. This kind of centralized management architecture is prone to risks such as single point of failure or untrusted data. To address the above problems, this paper proposes a scheme of network-level moving target defense system based on blockchain, which realizes dynamically switching the central controller through the PoW consensus mechanism and overcomes the single point of failure of it and improves its robustness. In addition, based on the distributed trusted network environment constructed by blockchain, this paper establishes load balancing mechanism and disaster-tolerant backup mechanism for the dynamic central controller, making the system have good performance in dealing with the high concurrent service requests and recovering quickly from paralysis. Finally, this paper designs and implements the prototype system of network-level moving target defense system based on blockchain. The test results show that the designed system has good availability and robustness.