Research on Autonomous Defense Paradigm for Smart Computing Integration Networks

LIU Ying; XIA Yu; YU Cheng-xiao; ZHANG Wei-ting; WANG Run-hu; ZHANG Hong-ke

doi:10.12263/DZXB.20230864

您当前的位置：

首页 >

文章列表页 >

Research on Autonomous Defense Paradigm for Smart Computing Integration Networks

PAPERS | 更新时间：2025-12-11

- Research on Autonomous Defense Paradigm for Smart Computing Integration Networks
- ACTA ELECTRONICA SINICA Vol. 52, Issue 5, Pages: 1432-1441(2024)
- 作者机构：
  
  1.北京交通大学电子信息工程学院,北京 100044
  2.鹏城实验室,广东深圳 518055
  3.中国电子科技集团有限公司第二十八研究所,江苏南京 210007
- 作者简介：
- 基金信息：
  
  The Major Key Project of PCL;National Key Research and Development Program of China(2022ZD0115301);National Natural Science Foundation of China(62201029);China Postdoctoral Science Foundation(2022M710007;BX20220029)
- DOI：10.12263/DZXB.20230864
  CLC： TP303;
- Received：15 September 2023，
  
  Revised：2024-04-03，
  
  Published：25 May 2024
- 稿件说明：
移动端阅览
刘颖, 夏雨, 于成晓, 等. 面向智算融合网络的自主防御范式研究[J]. 电子学报, 2024, 52(05): 1432-1441.

LIU Ying, XIA Yu, YU Cheng-xiao, et al. Research on Autonomous Defense Paradigm for Smart Computing Integration Networks[J]. Acta Electronica Sinica, 2024, 52(05): 1432-1441.
刘颖, 夏雨, 于成晓, 等. 面向智算融合网络的自主防御范式研究[J]. 电子学报, 2024, 52(05): 1432-1441. DOI：10.12263/DZXB.20230864

LIU Ying, XIA Yu, YU Cheng-xiao, et al. Research on Autonomous Defense Paradigm for Smart Computing Integration Networks[J]. Acta Electronica Sinica, 2024, 52(05): 1432-1441. DOI：10.12263/DZXB.20230864

摘要

随着数字经济时代算力供给模式的变革，以算力为核心的新型网络基础设施已成为实现算力资源共享、支撑数字经济转型的重要动力.在算力网络中，多元异构用户终端通过多种方式高频接入网络以随时随地获取算力服务，网络的开放性和动态性增大，算力网络将面临更严峻的安全挑战.然而，基于传统网络的安全防御模式通常针对具体安全问题静态式增补安全防护组件，无法主动适配用户需求灵活调整防御策略，难以应对算力网络中的安全风险.因此，本文面向新型算力网络安全需求，将安全功能作为网络内部属性，基于智算融合网络提出一种多维协同自主防御范式.结合智算融合网络“三层”“三域”的设计思想，在“三层”中，以广义服务层定义安全固有服务，以映射适配层智慧适配安全功能，以融合组件层执行安全策略；在“三域”中，以实体域先导资源适配，以知识域驱动安全服务流程，以感控域实施具体安全技术，构建“检测”“溯源”“防御”三维一体的完整基础管控流程，其中安全策略与技术可根据场景扩展性与业务安全性进行灵活调整.最终，通过仿真实验对所提范式有效性进行了验证，为未来智算融合安全的进一步研究和应用提供参考.

Abstract

With the transformation of the computing power supply pattern in the digital economy era

the new network infrastructure with computing power as the core has become an important driving force to realize the sharing of computing power resources and support the digital economy transformation. In the computing power network

multiple heterogeneous user terminals access the network frequently in various ways to obtain computing power services anytime and anywhere

which increases the openness and dynamics of the network. Hence

the computing power network will face more severe security challenges. However

the traditional network-based security defense pattern usually statically supplements security protection components for specific security issues

which cannot actively adapt to user needs to adjust defense strategies flexibly

which is difficult to deal with security risks in computing-network integration scenarios. Therefore

facing the security requirements of the new computing power network

this paper regards security as the internal attribute of the network and proposes a multi-dimensional collaborative autonomous defense paradigm based on the smart computing integration networks

which combines the design of “three layers” and “three domains” of the network. In the “three layers”

this paper defines the security inherent service at the generalized service layer

adapts the security function at the mapping adaptation layer

and executes the security strategy at the fusion component layer. In the “three domains”

the resource adaptation is guided by the entity domain

the security service process is driven by the knowledge domain

and the specific security technologies are implemented by the sense control domain. It constructs a basic management and control process that integrates “detection”

“trace”

and “defense”

in which security policies and technologies can be flexibly adjusted according to scenario scalability and business security. Finally

the proposed paradigm is verified through simulation experiments

and the results prove the effectiveness of the proposed paradigm and also provide a reference for further research and application of smart computing fusion security in the future.

关键词

Keywords

references

李少鹤 , 李泰新 , 周旭 . 算力网络:以网络为中心的融合资源供给 [J ] . 中兴通讯技术 , 2021 , 27 ( 3 ): 29 - 34 .

LI S H , LI T X , ZHOU X . Computing power network: A network-centric supply paradigm for integrated resources [J ] . ZTE Technology Journal , 2021 , 27 ( 3 ): 29 - 34 . (in Chinese)

邱勤 , 徐天妮 , 张智杰 , 等 . 算力网络安全应用需求与关键技术研究 [J ] . 信息技术与标准化 , 2022 ( 11 ): 19 - 24, 33 .

QIU Q , XU T N , ZHANG Z J , et al . Research on security application requirements and key technologies of computing force network [J ] . Information Technology & Standardization , 2022 ( 11 ): 19 - 24, 33 . (in Chinese)

曹畅 , 唐雄燕 . 算力网络关键技术及发展挑战分析 [J ] . 信息通信技术与政策 , 2021 , 47 ( 3 ): 6 - 11 .

CAO C , TANG X Y . Analysis of key technologies and development challenges of computing power network [J ] . Information and Communications Technology and Policy , 2021 , 47 ( 3 ): 6 - 11 . (in Chinese)

贾庆民 , 丁瑞 , 刘辉 , 等 . 算力网络研究进展综述 [J ] . 网络与信息安全学报 , 2021 , 7 ( 5 ): 1 - 12 .

JIA Q M , DING R , LIU H , et al . Survey on research progress for compute first networking [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 5 ): 1 - 12 . (in Chinese)

段晓东 , 姚惠娟 , 付月霞 , 等 . 面向算网一体化演进的算力网络技术 [J ] . 电信科学 , 2021 , 37 ( 10 ): 76 - 85 .

DUAN X D , YAO H J , FU Y X , et al . Computing force network technologies for computing and network integration evolution [J ] . Telecommunications Science , 2021 , 37 ( 10 ): 76 - 85 . (in Chinese)

TANG X Y , CAO C , WANG Y X , et al . Computing power network: The architecture of convergence of computing and networking towards 6G requirement [J ] . China Communications , 2021 , 18 ( 2 ): 175 - 185 .

张宏科 , 罗洪斌 . 智慧协同网络体系基础研究 [J ] . 电子学报 , 2013 , 41 ( 7 ): 1249 - 1252, 1254 .

ZHANG H K , LUO H B . Fundamental research on theories of smart and cooperative networks [J ] . Acta Electronica Sinica , 2013 , 41 ( 7 ): 1249 - 1252, 1254 . (in Chinese)

AHMAD I , NAMAL S , YLIANTTILA M , et al . Security in software defined networks: A survey [J ] . IEEE Communications Surveys & Tutorials , 2015 , 17 ( 4 ): 2317 - 2346 .

ZHOU Y Y , CHENG G , YU S . An SDN-enabled proactive defense framework for DDoS mitigation in IoT networks [J ] . IEEE Transactions on Information Forensics and Security , 2021 , 16 : 5366 - 5380 .

SAHAY R , MENG W Z , JENSEN C D . The application of Software Defined Networking on securing computer networks: A survey [J ] . Journal of Network and Computer Applications , 2019 , 131 ( C ): 89 - 108 .

张宏科 , 于成晓 , 权伟 , 等 . 融算网络体系基础研究 [J ] . 电子学报 , 2022 , 50 ( 12 ): 2928 - 2934 .

ZHANG H K , YU C X , QUAN W , et al . Fundamental research on computing integration networking [J ] . Acta Electronica Sinica , 2022 , 50 ( 12 ): 2928 - 2934 . (in Chinese)

张宏科 , 权伟 , 刘康 . 算力网络研究与探索 [J ] . 中兴通讯技术 , 2023 , 29 ( 1 ): 1 - 5 .

ZHANG H K , QUAN W , LIU K . Research and exploration of computing power network [J ] . ZTE Technology Journal , 2023 , 29 ( 1 ): 1 - 5 . (in Chinese)

The Center for Applied Internet Data Analysis . The CAIDA UCSD IPv4 Routed /24 topology dataset [EB/OL ] . ( 2022 )[2024 ] . https://www.caida.org/catalog/datasets/ipv4_routed_24_topology_dataset/ https://www.caida.org/catalog/datasets/ipv4_routed_24_topology_dataset/ .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Task Segmentation and Path Optimization in Heterogeneous Cloud-Edge-End Computing Power Network

Related Author

MA Bo

YU Ying-jie

WU Sha-chen

NI Chang

LU Qin

CHEN Chao

LI Chuan-huang

Related Institution

School of Information and Electronic Engineering, Zhejiang Gongshang University

⁰