Deployment of Dynamic Defense Strategies for Multiple Devices in the Industrial Internet Based on Zero Trust
This paper proposes an algorithm for deploying dynamic defense strategies on multiple devices in the industrial Internet based on zero trust, aiming at coping with complex and ever-changing security challenges. Malicious devices are identified through a submodular optimization algorithm, and defense strategies are dynamically allocated using mixed integer programming to ensure efficient protection of the system. This paper describes in detail the malicious devices feature analysis, the reverse strategy deviation algorithm, and the defense strategy allocation model, and verifies the effectiveness of the proposed algorithm through simulation experiments. The results show that the algorithm can maximize the security of the system under limited resources, respond to changes in device priorities and task requirements in real-time, and provide a new solution for security protection in the industrial Internet environment.
Authors
- Tianyu Gong
- Yun Li (ORCID: https://orcid.org/0000-0001-8477-8845)
- Zhe Wang (ORCID: https://orcid.org/0000-0002-1367-7139)
- Mo Wang (ORCID: https://orcid.org/0000-0001-7004-3549)
- Jianlei Gao
Institutions
- National Earthquake Response Support Service (CN)
- China Industrial Control Systems Cyber Emergency Response Team
Publication Details
- Published
- 2024-11-01
- DOI
- https://doi.org/10.1109/cac63892.2024.10864591
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00