Exploiting curse of diversity for improved network security

摘要: Higher species diversity in biological systems increases the robustness of system against spread disease or infection. However, computers are remarkably less diverse. Such lack poses serious risks to today's homogeneous computer networks. An adversary learns with initial compromises and then applies learned knowledge compromise subsequent effort time. exploit engineered take advantage a particular vulnerability could be leveraged on many other multiply effect an attack. The existence same multiple enterprise network greatly benefits because she can gain incremental access resources relative ease. In this paper, we have proposed metric identify all attack paths that not fairly/truly diversified. Our goal is which one more vulnerabilities exploited than once. Additionally, our what those affected software's/services? Based heuristics, identical vulnerable services were identified diversified by functionally equivalent alternatives such way requires independent (i.e. additional new effort) for exploiting each along every path. We presented small case study demonstrate efficacy applicability algorithm diversifying making robust 0-day attacks. Initial results show approach capable identifying software/applications/services need increased security.