Quantitative Evaluation of Dynamic Platform Techniques as a Defensive Mechanism

作者: Hamed Okhravi , James Riordan , Kevin Carter

DOI: 10.1007/978-3-319-11379-1_20

关键词:

摘要: Cyber defenses based on dynamic platform techniques have been proposed as a way to make systems more resilient attacks. These change the properties of platforms in order attacks complicated. Unfortunately, little work has done measuring effectiveness these defenses. In this work, we first measure protection provided by technique testbed. The counter-intuitive results obtained from testbed guide us identifying and quantifying major effects contributing such system. Based abstract effects, develop generalized model which can be used quantify their effectiveness. To verify validate our results, simulate show that measurements simulations match with small amount error. Finally, enumerate number lessons learned applied quantitative evaluation other defensive techniques.

参考文章(33)
David Evans, Anh Nguyen-Tuong, John Knight, Effectiveness of Moving Target Defenses Moving Target Defense. pp. 29- 48 ,(2011) , 10.1007/978-1-4614-0977-9_2
Steve Blackmon, John Nguyen, Storage: high-availability file server with heartbeat Sys Admin archive. ,vol. 10, pp. 24- 32 ,(2001)
Todd Jackson, Babak Salamat, Andrei Homescu, Karthikeyan Manivannan, Gregor Wagner, Andreas Gal, Stefan Brunthaler, Christian Wimmer, Michael Franz, Compiler-Generated Software Diversity Moving Target Defense. pp. 77- 98 ,(2011) , 10.1007/978-1-4614-0977-9_4
H. Okhravi, M. A. Rabe, T. J. Mayberry, W. G. Leonard, T. R. Hobson, D. Bigelow, W. W. Streilein, Survey of Cyber Moving Target Techniques Defense Technical Information Center. ,(2013) , 10.21236/ADA591804
Yih Huang, D. Arsenault, A. Sood, Incorruptible system self-cleansing for intrusion tolerance international performance computing and communications conference. ,(2006) , 10.1109/.2006.1629444
Pratyusa K. Manadhata, Jeannette M. Wing, A Formal Model for a System’s Attack Surface Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats. pp. 1- 28 ,(2007) , 10.1007/978-1-4614-0977-9_1
Jack Davidson, Kevin Scott, Strata: A Software Dynamic Translation Infrastructure University of Virginia. ,(2001)
CPPC: a compiler-assisted tool for portable checkpointing of message-passing applications Concurrency and Computation: Practice and Experience. ,vol. 22, pp. 749- 766 ,(2010) , 10.1002/CPE.V22:6
J. Arlat, K. Kanoun, J.-C. Laprie, Dependability modeling and evaluation of software fault-tolerant systems IEEE Transactions on Computers. ,vol. 39, pp. 504- 513 ,(1990) , 10.1109/12.54843