信息安全研究 ›› 2025, Vol. 11 ›› Issue (6): 569-.

• 学术论文 • 上一篇    下一篇

面向未知攻击感知的执行体细粒度调度算法

张涛陈璐张波席泽生汪晨何川   

  1. (国网智能电网研究院有限公司南京210003)
    (电力网络安全防护与监测技术实验室南京210003)
  • 出版日期:2025-06-22 发布日期:2025-06-22
  • 通讯作者: 陈璐 硕士,工程师.主要研究方向为电力信息安全. chenlu@geiri.sgcc.com.cn
  • 作者简介:张涛 硕士,高级工程师.主要研究方向为电力信息安全. zhangtao@geiri.sgcc.com.cn 陈璐 硕士,工程师.主要研究方向为电力信息安全. chenlu@geiri.sgcc.com.cn 张波 博士,高级工程师.主要研究方向为电力信息安全. zhangbo@geiri.sgcc.com.cn 席泽生 硕士,工程师.主要研究方向为电力信息安全. xizesheng@geiri.sgcc.com.cn 汪晨 硕士,高级工程师.主要研究方向为电力信息安全. wangchen@geiri.sgcc.com.cn 何川 硕士,工程师.主要研究方向为电力信息安全. hechuan@geiri.sgcc.com.cn

The Finegrained Executor Scheduling Algorithm for Unknown  Attacks Perception

Zhang Tao, Chen Lu, Zhang Bo, Xi Zesheng, Wang Chen, and He Chuan   

  1. (State Grid Smart Grid Research Institute Co., Ltd., Nanjing 210003)
    (State Grid Laboratory of Power CyberSecurity Protection and Monitoring Technology, Nanjing 210003)
  • Online:2025-06-22 Published:2025-06-22

摘要: 针对未知攻击利用电网设备特有的软件和系统漏洞构成的安全威胁,目前仅依赖编程语言层面的拟态防御技术忽略了操作系统和通信协议中的潜在问题,提出了一种细粒度的调度算法.该算法通过精细量化执行体的组件类别相似度,并在调度策略中引入攻击时间和频率等参数,评估执行体的历史失信度.最终,结合相似度和历史失信度,提出了一种冗余执行体综合异构性的量化算法.仿真实验表明,该算法在执行体相似性区分上显著优于其他算法,有效降低了相似漏洞或缺陷被利用的风险,减少了相似执行体调用带来的冗余浪费,其失效率始终低于0.55,优于其他常用算法,显示了良好的实用性.

Abstract: Addressing security threats from unknown attacks exploiting software and system vulnerabilities in power grid devices often overlooks potential issues within operating systems and communication protocols at the programming languarg level. This paper proposes a finegrained scheduling algorithm that quantifies the similarity of execution components and incorporates parameters such as attack timing and frequency to assess historical trust deficit. By combining similarity and historical trust deficit, a quantitative algorithm for redundant execution body heterogeneity is introduced. Simulation experiments demonstrate that this algorithm significantly outperforms other methods in distinguishing execution body similarity, effectively reducing the risk of exploiting similar vulnerabilities or defects, and minimizing redundant wastage from similar execution bodies. The failure rate remains consistently below 0.55, indicating superior practical performance compared to commonly used algorithms.

中图分类号: