突变-服务欺骗协同的移动目标防御方法OA

To address the problem that once discretely triggered mutation-based moving target defense(MTD)strategies in digital twin network(DTN)could not continuously intercept malicious traffic during trigger intervals,which might result in protection gaps,a mutation-service deception collaborative MTD method,termed MSD-MTD was proposed.Building upon address and service port mutation,MSD-MTD introduced a service deception mecha-nism to redirect suspicious traffic within mutation intervals,thereby enhancing continuous protection.Moreover,an intrusion detection approach based on cross-node traffic alignment and feature selection was employed to perceive network states,and a deep Q-network(DQN)was used to enable adaptive selection of MTD strategies.Compara-tive experiments were conducted on the Mininet-WiFi platform using the CICIDS-2017,CICIDS-2018,and UNSW-NB15 datasets,with performance benchmarked against two representative address-mutation methods.The results showed that MSD-MTD achieved average defense success rates of 93.36%,88.20%,and 95.50%on the three datasets respectively,while the round-trip time was mainly distributed within 0-2 ms,indicating that the proposed method improved defense effectiveness while imposing only limited impact on network service latency.