Abstract: Provided are network security defense method and network security defense system. The method includes: processing data multiple times using a preset processing strategy, where the processing strategy includes a first strategy and a second strategy, the first strategy is used for eliminating an influence of generalized disturbance on the second strategy, the second strategy after being eliminated the influence is applied to the data for calculation, storage and communication of the data, the first strategy includes an encoding strategy, a decoding strategy and a memory elimination strategy, and the generalized disturbance includes random disturbance and/or non-random disturbance; triggering a feedback control strategy based on a decoding result of the multiple processing results; and adjusting the first strategy according to the feedback control strategy.

Abstract: Provided is an input/output system applied to a network security defense system. A structural encoding unit and an error correction decoding unit are divided. The structure encoding unit is divided into input branch module and an input proxy module; and the error correction decoding unit is divided into an output routing module, an output proxy module, an adjudication branch module, an adjudication proxy module and a voting module. The input branch module is used for duplicating and distributing messages, the arbitration branch module is used for duplicating and distributing data, the voting module is used for performing voting, and the output routing module is used for selecting an output result from processing results of the output proxy module according to a voting result of the voting module.

Abstract: An output-decision-based negative feedback control method and system. The method includes: receiving, by an output decider, output responses of at least two heterogeneous functional equivalents, and dividing numbers corresponding to the at least two heterogeneous functional equivalents into at least one set according to the output responses; determining, by the output decider, credibility of each set according to the output responses, and sending the at least one set and the credibility corresponding to each set to a feedback controller via decision information; generating, by the feedback controller, a first scheduling policy and/or a second scheduling policy according to the decision information; and sending, by the feedback controller, the first scheduling policy to an input proxy, and/or sending a change instruction to the heterogeneous functional equivalent indicated by the second scheduling policy. The method can prevent in advance and process a heterogeneous functional equivalent that may be faulty.

Abstract: Provided are a security defense method and apparatus applied to a network security defense system. The method includes: using memoryless technology in a cyberspace information system, where the memoryless technology includes technology which is not affected by generalized disturbance; eliminating a memory of the cyberspace information system on an effect of random disturbance by using a redundancy and replacement mechanism; and eliminating a memory of the cyberspace information system on an effect of non-random disturbance by eliminating a memory of a program running in the cyberspace information system and/or data in the cyberspace information system. The present solution can block a memory of the cyberspace information system on an error caused by the generalized disturbance including the non-random disturbance and the random disturbance, thereby improving security of the cyberspace information system.

Abstract: An output-decision-based negative feedback control method and system. The method includes: receiving, by an output decider, output responses of at least two heterogeneous functional equivalents, and dividing numbers corresponding to the at least two heterogeneous functional equivalents into at least one set according to the output responses; determining, by the output decider, credibility of each set according to the output responses, and sending the at least one set and the credibility corresponding to each set to a feedback controller via decision information; generating, by the feedback controller, a first scheduling policy and/or a second scheduling policy according to the decision information; and sending, by the feedback controller, the first scheduling policy to an input proxy, and/or sending a change instruction to the heterogeneous functional equivalent indicated by the second scheduling policy. The method can prevent in advance and process a heterogeneous functional equivalent that may be faulty.