Research on Mimic Defense Technology and Security Test Method of Electric Power Web Service System

2019 2nd International Conference on Advanced Materials, Intelligent Manufacturing and Automation

Sun, Xin^1 ; Li, Qinyuan^1 ; Zhou, Sheng^1 ; Sun, Changhua^1

State Grid Zhejiang Electric Power Research Institute, Hangzhou, Zhejiang, China^1

关键词: Defense technologies;    Dynamic environments;    Electric power;    Operating environment;    Software and hardwares;    Unknown attacks;    Web application systems;    Web service systems;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/569/4/042011/pdf
DOI  :  10.1088/1757-899X/569/4/042011

来源: IOP

【 摘 要 】

In this paper, aiming at the demand of active defense against attacks in the environment of "poisonous bacteria" in electric power web service system, the mimic defense technology of electric power web service system based on dynamic transformation of resources and heterogeneous redundant executors is proposed. The dynamic environment is realized through active changes of software and hardware elements at different levels, thus destroying the deterministic and persistent dependency conditions of the attack chain on the operating environment, blocking the network attack chain, solving the problem of unknown attack defense using unknown vulnerabilities and unknown backdoors, and effectively enhancing the network security of key Web application systems in the power industry. On this basis, in order to verify the security of mimic defense technology in electric power web service system, a security test method is given to verify the feasibility and effectiveness of mimic defense technology on web.