A Decentralized Cyber Mimic Defense Architecture Based on Consensus Protocol

Cyberspace Mimic Defense (CMD) has fundamentally changed the situation of traditional network security defense through Dynamic Heterogeneous Redundancy (DHR) architecture. Presently, research on DHR architecture is based on the trustworthiness of the arbiters and schedulers. However, in practical applications, the core logic is generally deployed on a single server, which is vulnerable to single points of attack and failure, thus damaging the entire system’s security. This paper proposed a decentralized DHR architecture, which transfers the arbitration and scheduling logic to all executors. Based on the Practical Byzantine Fault Tolerance (PBFT) protocol, this paper designed the consensus protocol used in the decentralized DHR architecture to ensure the consistency of the status of each executor. Theoretical analysis and experiments show that the architecture is more secure than the traditional DHR architecture and can tolerate Byzantine faults.