标识驱动网络中弹性跳变关键技术研究

With the endless stream of network attacks and increasingly frequent network security incidents, the network security situation is facing severe challenges. Due to the static rigidity of the existing network protocol system, the time lag of network security defense and the cost asymmetry, the asymmetry situation of "easy to attack and hard to keep" of network security is further exacerbated. Therefore, in order to meet the above challenges in network security, it is urgent to consider a network architecture that supports intrinsic security from the overall. In addition, according to the requirements and security configurations of network services, the network adapts to network address hopping and switching to make the network have the ability to flexible dynamic changes, fundamentally solve the existing network security malpractice. This project studies the key technologies of resilient migration based on identity-driven network including the security state transition model of resilient migration, the strategy selection of resilient migration and the quantitative assessment of resilient migration, with the objective to achieve the obstacles and containment of the process of network attack detection and implementation, completely reversing the difficulties of network security offensive and defensive asymmetry.

随着网络攻击手段层出不穷，网络安全事件日益频发，网络安全形势正面临严峻的挑战。由于现有的网络协议体系的静态僵硬、网络安全防御时间的滞后性、成本的不对称性，使得网络安全“易攻难守”的不对称态势更加加剧。因此，为了应对以上网络安全面临的挑战，急需从整体上考虑一个支持内生安全的网络体系架构，并根据网络服务需求和安全配置主动适配网络地址的跳变与切换，使网络具有弹性动态变化的能力，从根本上解决现有网络存在的安全性弊端。本项目拟研究基于标识驱动网络的弹性跳变关键技术，从弹性跳变安全状态迁移模型、弹性跳变策略选择和弹性跳变量化评估三个方面展开研究，以此实现对网络攻击侦察与实施过程的阻碍和牵制，彻底扭转网络安全攻防双方不对称的困境。

随着网络攻击手段层出不穷，网络安全事件日益频发，网络安全形势正面临严峻的挑战。由于现有的网络协议体系的静态僵硬、网络安全防御时间的滞后性、成本的不对称性，使得网络安全“易攻难守”的不对称态势更加加剧。因此，为了应对以上网络安全面临的挑战，急需从整体上考虑一个支持内生安全的网络体系架构，并根据网络服务需求和安全配置主动适配网络地址的跳变与切换，使网络具有弹性动态变化的能力，从根本上解决现有网络存在的安全性弊端。本项目以标识驱动网络内生安全的新需求和体系结构为基础，研究其标识跳变关键技术，并提出适应天地一体化场景的标识驱动网络内生安全体系结构以及适应未来互联网演进的内生安全标识分配和跳变机制，以此实现对网络攻击侦察与实施过程的阻碍和牵制，彻底扭转网络安全攻防双方不对称的困境。