面向内生安全可用性的协同任务规划方法研究

内生安全（ES）是网络信息时代战略性前沿技术。目前内生安全架构尚处于研究阶段。主流的架构包括动态异构冗余、类神经系统和弹性异构架构。针对上述架构的研究，大多集中在ES可用性的协同任务规划方面，即结合ES架构，协作规划网络资源，执行节点故障修复、性能提升以及对外服务等任务。以往研究忽略架构中节点和任务差异，导致攻击误判和系统评估偏差；任务及架构规划单元划分过大，导致性能和寿命偏低；单一反馈难以快速学习规律且使得系统具有较低的可用性和服务能力。本项目以满足ES可用性下高效协同任务规划为主要目标，突破传统方式不足，综合考虑可用性和开销，提出复杂任务不规则冗余分解，元任务与执行起点差异匹配，元任务多维异构传输规划及双重反馈技术。同时本项目也将结合任务执行各阶段特点，研究相应理论模型和混合算法。本项目中关键技术的攻克，可在保障系统可用性的情况下，实现ES协同任务的最优规划，具有重要的理论和应用价值。

Endogenous security (ES) is a strategic frontier technology in the network information age, of which architecture is still in the research stage at present. Mainstream ES architectures include dynamic heterogeneous redundancy, nervous system-like, and elastic heterogeneity. Most of the literatures on the above architectures are centered on the cooperative task planning of ES availability, that is, combining the ES architecture, collaboratively planning network resources, performing tasks such as node failure repair, performance improvement, and external services. Previous studies ignore the differences of nodes and tasks in architectures, leading to attack misjudgment and system evaluation deviation; partition of tasks and architecture planning units are too large, resulting in low performance and short life; single feedback is difficult to learn the law quickly, which leads to low applicability and serviceability of the system. Therefore, aiming at satisfying the efficient co-task planning for ES availability, and breaking through the shortcomings of traditional methods, this study considers both availability and cost, and proposes irregular redundancy decomposition of complex tasks, difference matching between meta-tasks and execution starting points, multidimensional heterogeneous planning of meta-tasks, and dual feedback technology. Meanwhile, corresponding theoretical models and hybrid algorithms considering the architecture of each stage are to be studied. Finding solutions of key technologies in this study can provide key technical support for the optimal planning of ES collaborative tasks under the guarantee of system availability, which is of important theoretical and application values.