To break the long-standing imbalance of “easy to attack, hard to defend” in cyberspace, cyberspace mimic defense (CMD) has been proposed. It provides active defense against known and unknown vulnerabilities and backdoors via a dynamic heterogeneous redundancy (DHR) mechanism. Although the DHR architecture can suppress disturbances from physical factors or endogenous faults, data processing and transmission inside the architecture are usually in plaintext, which poses severe threats to data privacy. To address this problem, we propose a mimic active defense method based on multiple encryption structure encodings. For heterogeneity, an encryption/decryption component set module is designed to achieve data-level heterogeneity among executors. For dynamics, an executor identifier encryption scheme based on the elliptic curve digital signature algorithm (ECDSA) is used to protect the executor selection process. Meanwhile, a dynamic scheduling algorithm based on historical confidence is applied to reduce the impact of faulty executors. Experimental results show that the proposed method has obvious advantages in data privacy protection in terms of average historical confidence, execution efficiency, and bit error rate.
Shao et al. (Tue,) studied this question.