论文标题
基于云的虚拟网络的有效欺骗体系结构
An efficient deception architecture for cloud-based virtual networks
论文作者
论文摘要
新兴的欺骗性系统为基于云的虚拟网络的起义问题(尤其是中小型企业经营的欺骗性问题)带来了新的希望。欺骗性系统的主要目标是在基于互联网的云虚拟网络中形成一层防御性节点,以分散和欺骗恶意客户。尽管许多方法为开发决定性系统提供了不同的模型,但苦难的挖掘物为分散强大的远程入侵的注意力而有希望的决定性模型。痛苦的挖掘物可以延迟对基于云的虚拟网络深入目标的访问。苦难理论的核心挑战是验证其在突出的云计算平台中的适用性,并衡量适应它们的网络的效率。因此,需要建筑支持可以通过长期支持技术实现,并且可以用于大型网络。这项工作介绍并分析了苦难挖掘的高通量架构,并着手进行实施细节和绩效分析。亚马逊Web服务中体系结构的完整实现在请求处理中施加了适度的性能延迟,同时高度延迟了网络中的隐身入侵。
Emerging deceptive systems present a new promise for the uprising security problems in cloud-based virtual networks, especially those operated by small and medium enterprises. The main goal of deceptive systems is to form a layer of defensive nodes in an Internet-accessible cloud-based virtual network to distract and deceive malicious clients. While numerous approaches provide distinct models for developing decisive systems, misery digraphs present a promising decisive model for distracting powerful remote intrusions. Misery digraphs can delay access to targets deep in a cloud-based virtual network. A central challenge to the theory of misery digraphs is verifying their applicability in prominent cloud computing platforms as well as measuring the efficiency of networks that adapt them. Thus, architectural support is needed that can be realized with long-term support technologies and can be deployed for large networks. This work presents and analyzes a high-throughput architecture for misery digraphs, embarking on implementation details and performance analysis. Full implementation of the architecture in Amazon Web Services imposes modest performance delays in the request processing, while highly delaying stealth intrusions in the network.