|国家科技期刊平台
首页|期刊导航|移动通信|基于拟态防御技术的API网关安全防护方法

基于拟态防御技术的API网关安全防护方法OA

API Gateway Security Protection Method Based on Mimetic Defense Technology

中文摘要英文摘要

针对当前API网关采用常规防御的方法很难有效防御漏洞、病毒及后门监测所产生的数据安全威胁,提出一种基于拟态防御技术的API网关安全防护方法.首先,在网关通过构建基于熵的异构度和内外安全度计算执行体裁决指标;其次,结合随机调度机制实现可信执行体选择;最后,通过反馈机制实现可信执行体动态调整,从而达到安全防御的闭环并不依赖任何执行条件实现系统的自适应防御.实验表明,所提算法相对于基于优先级调度算法的优势,具有一定的实用性.

Given the challenges posed by conventional defense methods in effectively protecting API gateways from vulnerabilities,viruses,and backdoor threats,we propose an API gateway security method based on mimetic defense technology.Initially,the gateway constructs decision metrics for executors using entropy-based heterogeneity and internal-external security evaluations.Next,a randomized scheduling mechanism is employed to select trusted executors.Finally,a feedback mechanism dynamically adjusts the trusted executors,achieving a closed-loop security defense that adapts to threats without relying on any predetermined execution conditions.Experimental results demonstrate that the proposed algorithm offers practical advantages over priority-based scheduling algorithms.

姚俊

中国电信股份有限公司上海分公司,上海 200120

电子信息工程

拟态防御数据安全API网关动态调度

Mimetic defensedata securityAPI gatewaydynamic scheduling

《移动通信》 2024 (007)

122-126 / 5

10.3969/j.issn.1006-1010.20240512-0001

评论