摘要： 为实现信息系统安全防御的目的，针对动态异构冗余（DHR）架构设计拟态通用运行环境（MCOE）框架。以拟态化改造后功能等价的异构冗余信息系统应用程序，以及异构化的信息系统运行环境设施为对象，为N异构执行体构建面向服务请求的资源调度、分发、执行、表决、安全威胁清洗恢复以及管理的自动化运行支撑环境，提供拟态产品的分发、表决统一集成接口规范。在该框架中，服务请求主键驱动的N个异构执行体和MCOE分发、内部表决、外部表决、协同执行、管理5个服务器交互运行。仿真结果表明，该设计可有效抵御软硬件后门和漏洞引发的网络攻击。

关键词: 拟态防御, 动态异构冗余, 拟态通用运行环境, 分发服务, 表决服务, 管理服务, 服务请求主键

Abstract: For information system security,this paper proposes a Mimic Common Operating Environment(MCOE) framework for Dynamic Heterogeneous Redundancy(DHR) architecture.The objects of the framework are heterogeneous redundancy information system application that is functionally equivalent to the system before mimicry transformation and running environment facilities of heterogeneous information systems.For N heterogeneous executive bodies,the framework constructs a supportive environment for automation to process resource allocation,distribution,execution,voting,security threat cleaning recovery and management for service requests.The framework provides uniform integrated interface standards for the distribution and voting of mimicry products.In this framework,the N heterogeneous executors driven by the primary key of service request and five servers,MCOE distribution,internal voting,external voting and management servers collaborative execute.Simulation results show that the design can effectively protect network attacks from hardware and software backdoor and vulnerability.

Key words: mimic defense, Dynamic Heterogeneous Redundancy(DHR), Mimic Common Operating Environment(MCOE), distribution service, voting service, management service, primary key of service request

中图分类号: 

• TP391