摘要
针对当前API网关采用常规防御的方法很难有效防御漏洞、病毒及后门监测所产生的数据安全威胁,提出一种基于拟态防御技术的API网关安全防护方法。首先,在网关通过构建基于熵的异构度和内外安全度计算执行体裁决指标;其次,结合随机调度机制实现可信执行体选择;最后,通过反馈机制实现可信执行体动态调整,从而达到安全防御的闭环并不依赖任何执行条件实现系统的自适应防御。实验表明,所提算法相对于基于优先级调度算法的优势,具有一定的实用性。
Given the challenges posed by conventional defense methods in effectively protecting API gateways from vulnerabilities,viruses, and backdoor threats, we propose an API gateway security method based on mimetic defense technology.Initially, the gateway constructs decision metrics for executors using entropy-based heterogeneity and internal-externalsecurity evaluations. Next, a randomized scheduling mechanism is employed to select trusted executors. Finally, afeedback mechanism dynamically adjusts the trusted executors, achieving a closed-loop security defense that adapts tothreats without relying on any predetermined execution conditions. Experimental results demonstrate that the proposedalgorithm offers practical advantages over priority-based scheduling algorithms.
作者
姚俊
YAO Jun(China Telecom Shanghai Branch,Shanghai 200120,China)
出处
《移动通信》
2024年第7期122-126,共5页
Mobile Communications
关键词
拟态防御
数据安全
API网关
动态调度
Mimetic defense
data security
API gateway
dynamic scheduling
