Mimic arbiter based on similarity comparison

Mimic defense is an important means of cyberspace defense. It defends against unknown attacks by constructing multiple heterogeneous executors to make the system redundant. However, existing mimetic arbiters often suffer from low efficiency because they judge the response data of executors. To address this issue, a mimetic decision rule based on heterogeneous executors path comparison is proposed to improve the voting efficiency. Based on the judgment of paths of executors, key positions in each heterogeneous executor are instrumented with route markers so that each executor automatically outputs markers on the actual execution path during runtime. The markers output by each executor are grouped based on similarity, then the algorithm of decision and scheduling rules based on historical performance and base address distance are set according to the grouping. Experimental results show that this method can improve the efficiency of mimetic decision-making while ensuring security.