Evaluation for Combination of Shuffle and Diversity on Moving Target Defense Strategy for Cloud Computing

摘要: Moving Target Defence (MTD) has been recently proposed and is an emerging proactive approach which provides asynchronous defensive strategies. Unlike traditional security solutions that focused on removing vulnerabilities, MTD makes a system dynamic unpredictable by continuously changing attack surface to confuse attackers. can be utilized in cloud computing address the cloud's security-related problems. There are many literature proposing methods various contexts, but it still lacks approaches evaluate effectiveness of method. In this paper, we combination Shuffle Diversity techniques investigate effects deploying these from two perspectives lying groups metrics (i) risk: providers' perspective (ii) cost return attack: attacker's point view. Moreover, utilize scalable Graphical Security Model (GSM) enhance analysis complexity. Finally, show combining improve both aforementioned while individual technique cannot.