Research And Implementation Of Management Control System Based On Redundant Heterogeneous Architecture

Existing cyberspace defense technologies,such as firewalls and anti-virus software,are mostly passive defenses.Although many studies have proposed active defense technologies such as honeypots and Moving Target Defense(MTD),they all have their own shortcomings.Mimic defense proposes the Dynamic redundancy heterogeneity(DHR)architecture,which dynamically selects several heterogeneous executors from the pool of executors for execution,and judges the data of each execution body.The DHR architecture solves the shortcomings of the above-mentioned defense technologies,and greatly increases the endogenous security and active defense capability of the system.Optical transmission equipment is an important part of the optical transmission network.The existing methods for enhancing the security of optical transmission networks are mostly based on the network level,and there are relatively few studies on the security of optical transmission equipment.Based on this,with the business requirements of the mimic optical transmission system as the background,it is proposed to introduce the redundancy and heterogeneity of mimic defense technology into the management control system of optical transmission equipment,realize the redundant heterogeneous multi-core architecture,and develop a management control system based on the redundant heterogeneous architecture.And based on the management and control system of the redundant heterogeneous architecture,the Openflow protocol is extended to meet the business requirements of the mimic optical transmission system.The main research results are as follows:(1)The redundancy and heterogeneity of mimic defense technology is introduced into the management and control system of optical transmission equipment to realize redundant heterogeneous multi-core architecture;a multi-core communication scheme based on shared memory and interrupt mechanism is designed;and an attack is established against the designed redundant heterogeneous management and control system Probabilistic model.The designed management and control system enhances the system's active defense capability and anti-attack capability,improves the system's security performance,and provides a solution for the extension of mimic defense technology to optical transmission equipment.(2)The management and control system based on the redundant heterogeneous architecture expands the Openflow protocol,and the expansion content includes port expansion and message expansion.The port is expanded to a custom optical port attribute.Message ex tensions include:modifying existing message types,adding custom optical port information in the Experimenter field in the Multipart message;adding new message types,adding Topol_request/Tpol_rep-ly,Path_mod/Path_Mod_reply,Inquire_Performance/Inquire_Peforman-ce_Reply,Optical_Port_Status messages.Experiments verify that the extended Openflow protocol can meet the communication requireme nts of redundant heterogeneous management control systems.(3)The developed redundant heterogeneous management and control system has been developed through simulation experiments.When the duration of a single attack is 0.5,the probability of being successfully attacked and safety gain of single-core system are respectively 13.93%and 1,and the tri-core control system of that are 1.19%and 1.148,the five-core control system of that are 0.15%and 1.160.Therefore,the safety performance of the redundant heterogeneous multi-core control system has been significantly improved compared to the single-core control system.The performance test showed that the running time of the single-core control system was 26.55 ms,the running time of the tri-core control system was 60.21 ms,and the running time of the five-core control system was 74.34 ms.Although the multi-core control system has a longer running time than the single-core control system,it has achieved a significant increase in safety performance with a lower time delay.