Multi-stage Proactive Defense Against Intelligent Penetration Attacks in Power Systems
摘要
This paper presents a dynamic defense strategy against intelligent agent-based attacks. It employs deceptive techniques—such as altering sensitive host addresses and obfuscating operating system information—to mislead adversaries. A situation-awareness module is integrated to adjust defense actions in real time based on network topology metrics. Compared with conventional honeypot defenses, the proposed situation-aware moving target defense demonstrates superior performance in mitigating agent-driven threats. To address the high adaptability and stealth of AI-based attacks, as well as the overhead of MTD, the strategy leverages Netfilter and eBPF for efficient OS-level obfuscation. Experiments on the NASim platform confirm its effectiveness in enhancing defensive performance against intelligent agents.