在DDHR架构中的不完整信息下抵抗基于记忆的APT攻击:一种基于RL的 entropy-heterogeneity-Aware调度方法
Xinghua Wu1,2, Mingzhe Wang2, Xiaolin Chang1
1Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing 100044, China.
Entropy (Basel, Switzerland)
|December 24, 2025
概括
新的人工智能驱动的网络威胁,如基于记忆的APT攻击,挑战了关键基础设施安全. 本研究介绍了铁路客运服务系统 (RPSS) 的智能防御调度方法,以有效应对这些不断变化的威胁.
科学领域:
- 网络安全 网络安全
- 人工智能的人工智能
- 信息系统信息系统信息系统
背景情况:
- 人工技术的进步引入了复杂的网络威胁,包括基于记忆的高级持久威胁 (APT) 攻击.
- 关键基础设施,如铁路客运服务系统 (RPSS),面临着巨大的风险,由于这些不断变化的威胁和传统的安全限制.
- RPSS云中心的双层动态异质冗余 (DDHR) 架构存在特定的漏洞,包括估计冗余执行器调度时间的挑战以及缺乏针对此类攻击的智能防御机制.
研究的目的:
- 在RPSS DDHR架构中解决准确估计调度时间和开发智能防御策略来应对基于记忆的APT攻击的挑战.
- 通过利用DDHR冗余执行器的信息来制定在不完整信息下优化辩护者的回报的问题.
- 提出一种新的防御调度方法,以提高RPSS对复杂网络威胁的弹性.
主要方法:
- 在不完整的信息下开发了一个问题表述,以优化防御者的回报,并将DDHR冗余执行者的信息结合起来,以模拟攻击者和防御者的行为.
- 提出了一种估计攻击时间的方法,以克服在不完整的信息下确定调度时间的挑战.
- 引入了近接政策优化与信息和异质性 (PPO_HE) 算法,增强了PPO算法,具有DDHR冗余执行者的可量化的信息和异质性指标.
主要成果:
- 与现有方法相比,PPO_HE方法在打击网络攻击方面表现出每次调度操作的优越效率.
- 广泛的实验评估了使用信息衰变量和速率的方法,证实了它的有效性.
- 在相同的初始信息的条件下,PPO_HE方法在基于记忆的攻击中提供了最长的抵抗时间.
结论:
- 拟议的PPO_HE方法为RPSS DDHR架构提供了一种有效和智能的防御调度方法,以应对先进的网络威胁.
- 信息和异质性的整合提供了一个可量化的框架,用于加强关键信息系统中的网络安全防御.
- 这项研究有助于在面对不断发展的人工智能驱动的网络风险时,为关键基础设施开发更强大,更适应性的安全解决方案.
相关概念视频
Chunking and Rehearsal in Sensory Memory
538
Improving short-term memory can be achieved through techniques like chunking and rehearsal. Chunking involves organizing information into larger, more manageable units. This technique is particularly useful for information that exceeds the typical memory span of between five and nine items. For instance, logging into an online account with a password like "ta89vq0179gz" involves grouping letters and numbers into three chunks—ta89, vq01, and 79gz. It makes large amounts of...
538
Interference and Decay
394
Forgetting is a complex cognitive phenomenon influenced by several factors, among which interference and decay are particularly prominent. These processes explain why individuals often struggle to retrieve specific information from memory, leading to lapses in recall that can be observed in everyday situations.
Interference occurs when competing memories hinder the retrieval of particular information. It can be classified into two types: proactive and retroactive interference. Proactive...
Interference occurs when competing memories hinder the retrieval of particular information. It can be classified into two types: proactive and retroactive interference. Proactive...
394
Reinforcement Schedules
429
Positive reinforcement is a powerful method for teaching new behaviors to both animals and humans. B.F. Skinner demonstrated this with his experiments using rats in a Skinner box. When a rat pressed a lever, it received a food pellet. This immediate reward encouraged the rat to repeat the behavior. This method, where a reward follows every instance of the behavior, is known as continuous reinforcement. It is highly effective for establishing new behaviors quickly.
Once a behavior is learned,...
Once a behavior is learned,...
429
Forgetting
336
Forgetting is an intrinsic aspect of human memory, characterized by the gradual loss or inaccessibility of information over time. Hermann Ebbinghaus, a pioneering psychologist, extensively studied this phenomenon and formulated the forgetting curve. This curve illustrates that memory loss occurs rapidly immediately after learning and then decelerates over time. Several mechanisms contribute to forgetting, including encoding failure, storage decay, retrieval failure, and interference.
Encoding...
Encoding...
336
Elaborative Rehearsals
302
Elaborative rehearsal is a crucial cognitive strategy that strengthens information encoding in long-term memory by making meaningful connections between new data and pre-existing knowledge. This approach contrasts with maintenance rehearsal, which involves simple repetition without delving into the significance of the information. While maintenance rehearsal might temporarily keep information active in short-term memory, it is less effective for long-term retention.
The effectiveness of...
The effectiveness of...
302
Understanding Memory
1.3K
Memory is the retention of information or experiences over time, facilitated through three main processes: encoding, storage, and retrieval. Encoding is the process of inputting information into the memory system. For instance, when listening to a lecture, watching a play, reading a book, or having a conversation, the brain is actively encoding information. This initial stage involves transforming sensory input into a form that can be processed and stored by the brain. Various factors, such as...
1.3K

