摘要
针对Ceph分布式存储文件系统相应服务程序,采用拟态防御技术,结合Ceph多副本的存储访问机制,构建了相应服务程序的多个功能等价异构体。设计了相应异构体的分发、执行、判决以及安全威胁的诊断、清洗及恢复拟态防御机制,有效的防御了漏洞、后门和攻击等安全威胁,确保了系统数据的完整性与服务的可靠性。
Aimed at service programs of Ceph distributed storage service programs,the mimicry defense technology is combined with the storage access mechanism of Ceph multiple copies to construct multiple functional equivalence isomers of corresponding service programs.The distribution,execution,judgment and security threat diagnosis,cleaning and restoration mimicry defense mechanism of the corresponding isomers are designed.This not only effectively protects against security threats such as vulnerabilities,backdoors,and attacks,but also ensures system data integrity and service reliability.
作者
王梦童
邵培南
WANG Meng-tong;SHAO Pei-nan(The 32nd Research Institute of China Electronics Technology Group Corporation,Shanghai 201808,China)
出处
《信息技术》
2020年第2期43-48,57,共7页
Information Technology
基金
上海市科学技术委员会建设基金(17DZ2251400)
关键词
分布式存储
动态异构冗余机制
分发判决
清洗恢复
资源调度
distributed storage
dynamic heterogeneous redundancy
distribution and judgment
cleaning and recovery
resource scheduling
