Introducing Diversity and Uncertainty to Create Moving Attack Surfaces for Web Services

摘要: Web servers are primary targets for cyber attack because of the documents they may contain, transactions support, or opportunity to cause brand damage reputational embarrassment victim organization. Today most web services implemented by employing a fixed software stack that includes server program, application programs, an operating system, and virtualization layer. This mix as whole constitutes surface service vulnerability in one components make up is potential threat entire service. chapter presents approach employs rotational scheme substituting different stacks any given request order create dynamic uncertain area system. In particular, our automatically creates set diverse virtual (VSs), each configured with unique mix, producing diversified surfaces. Our offline rotating replace online on either rotation schedule event-driven basis. Assuming N VSs, M < them will serve at time while off-line VSs reverted predefined pristine state. By constantly changing introducing randomness their selections, attackers face multiple, changing, unpredictable