AMTD:a way of adaptive moving target defense

Danjun LIU; Guilin CAI; Baosheng WANG

doi:10.11959/j.issn.2096-109x.2018008

您当前的位置：

首页 >

文章列表页 >

AMTD:a way of adaptive moving target defense

Papers | 更新时间：2024-06-03

- AMTD:a way of adaptive moving target defense
- Chinese Journal of Network and Information Security Vol. 4, Issue 1, Pages: 15-25(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018008
  CLC： TP302
- Online First：2018-01，
  
  Published：15 January 2018
- 稿件说明：
移动端阅览
Danjun LIU, Guilin CAI, Baosheng WANG. AMTD:a way of adaptive moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 15-25.
DOI：

Danjun LIU, Guilin CAI, Baosheng WANG. AMTD:a way of adaptive moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 15-25. DOI： 10.11959/j.issn.2096-109x.2018008.

摘要

MTD是通过动态移动目标的攻击面来改变攻击和防御不对称状态的一种新方式。MTD变换频率对于系统可用性、安全性和防御成本之间的权衡至关重要。但目前的变换频率通常根据管理者的经验确定，缺乏理论基础，无法达到可用性－安全性成本之间的权衡。为应对这一挑战，提出了适应性移动目标防御框架（AMTD），在确保系统可用的前提下，以最低的成本获取最大的系统安全性。AMTD的适应性体现在2 方面：一是防御模式的适应性，通过提出一种自适应转换策略，提供由安全警报触发的反应性防御和定时器到期事件触发的主动防御；二是变换频率的适应性，通过建立数学模型获得最优的变换频率。采取4个系列的模拟实验验证该解决方案的有效性。

Abstract

Moving target defense is a new way to change the asymmetry state between attack and defense

by dynamically moving target’s attacking surface.Frequency conversion of MTD is of great importance for the weighing between usability

security and defense cost.Nowadays

however

frequency conversion is usually determined by manager’s experience

which cannot create a balance between usability and security cost for the lack of theory basis.An adaptive moving target defense framework(AMTD)was proposed.AMTD can maximize system security at the lowest cost while ensuring that the system is available.The adaptability of AMTD has two modes.Firstly

the defense mode

it contains an adaptive conversion strategy to provide reacting defense triggered by security alerts and active defense triggered by timer expiration events.The other mode is the frequency conversion

which obtain the optimal conversion frequency by establishing mathematical models.Four series of simulation experiments were taken to verify the effectiveness of the solution.

关键词

Keywords

references

LIU Y , PENG W , SU J . A study of IP prefix hijacking in cloud computing networks [J ] . Security and Communication Networks , 2014 , 7 ( 11 ): 2201 - 2210 .

WANG T , WANG H , LIU B , et al . Further analyzing the sybil attack in mitigating peer-to-peer botnets [J ] . KSII Transactions on Internet ＆ Information Systems , 2012 , 6 ( 10 ).

WANG F , WANG H , WANG X , et al . A new multistage approach to detect subtle DDoS attacks [J ] . Mathematical and Computer Modelling , 2012 , 55 ( 1 ): 198 - 213 .

ZDNet C , ZACK W . PRISM:here’s how the NSA wiretapped the Internet [EB/OL ] . http://www.zdnet.com/article/prism-heres-how-thensa-wiretapped-the-internet/ http://www.zdnet.com/article/prism-heres-how-thensa-wiretapped-the-internet/ .

CODENOMICON . The heartbleed bug [EB/OL ] . http://heartbleed.com http://heartbleed.com .

CLARK A , SUN K , POOVENDRAN R . Effectiveness of IP address randomization in decoy-based moving target defense [C ] // The 52nd IEEE Conference on Decision and Control . 2013 : 678 - 685 .

MANADHATA P , . Game theoretic approaches to attack surface shifting [M ] // Moving Target Defense II:Application of Game Theory and Adversarial Modeling . 2013 : 1 - 13 .

CROUSE M , PROSSER B , FULP E . Probabilistic performance analysis of moving target and deception reconnaissance defenses [C ] // The Second ACM Workshop on Moving Target Defense . 2015 : 21 - 29 .

ZHU Q , BAŞAR T , . Game-theoretic approach to feedback-driven multi-stage moving target defense [C ] //. The 4th International Conference on Decision and Game Theory for Security-Volume 8252 .

CAI G L , WANG B S , HU W , et al . Moving target defense:state of the art and characteristics [J ] . Frontiers of Information Technology＆ Electronic Engineering , 2016 , 17 ( 11 ): 1122 - 1153 .

NITRDSubcommittee National cyber leap year summit 2009 co-chairs’ report [EB/OL ] . https://www.nitrd.gov/nitrdgroups/index.php?title=Category:National_Cyber_Leap_Year_Summit_ 2009 https://www.nitrd.gov/nitrdgroups/index.php?title=Category:National_Cyber_Leap_Year_Summit_ 2009 .

AZAB M , HASSAN R , ELTOWEISSY M . ChameleonSoft:a moving target defense system [C ] // The 7th International Conference on Collaborative Computing:Networking,Applications and Worksharing (CollaborateCom) . 2011 : 241 - 250 .

OKHRAVI H , COMELLA A , ROBINSON E , et al . Creating a cyber moving target for critical infrastructure applications [M ] // Critical Infrastructure Protection V . Berlin Heidelberg:Springer , 2011 : 107 - 123 .

HUANG Y , GHOSH A . Introducing diversity and uncertainty to create moving attack surfaces for Web services [M ] // Moving Target Defense:Creating Asymmetric Uncertainty for Cyber Threats . 2011 : 131 - 151 .

DEBROY S , CALYAM P , NGUYEN M , et al . Frequency-minimal moving target defense using software-defined networking [C ] // 2016 International Conference on Computing,Networking and Communications (ICNC) . 2016 : 1 - 6 .

LUO Y , WANG B , WANG X , et al . RPAH:random port and address hopping for thwarting internal and external adversaries [C ] // 2015 IEEE Trustcom/BigDataSE/ISPA . 2015 : 263 - 270 .

周志华 . 机器学习 [M ] . 北京 : 清华大学出版社 , 2016 .

ZHOU Z H . Machine learning [M ] . Beijing : Tsinghua University PressPress , 2016 .

BERAUD P , CRUZ A , HASSELL S , et al . Using cyber maneuver to improve network resiliency [C ] // 2011 Military Communications Conference (MILCOM 2011) . 2011 : 1121 - 1126 .

KUHL M E , KISTNER J , COSTANTINI K , et al . Cyber attack modeling and simulation for network security analysis [C ] // The 39th Conference on Winter Simulation . 2007 : 1180 - 1188 .

BERAUD P , CRUZ A , HASSELL S , et al . Cyber defense network maneuver commander [C ] // 2010 IEEE International Carnahan Conference on Security Technology (ICCST) . 2010 : 112 - 120 .

Views

3063

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research progress on dynamic hopping technology for network layer

Dynamic heterogeneous scheduling method based on Stackelberg game model in container cloud

Moving target defense against adversarial attacks

Improve the robustness of algorithm under adversarial environment by moving target defense

Research progress on moving target defense for SDN

Related Author

Guozhen CHENG

Shumin HUO

Jinglei TAN

Jie NIU

Fucai CHEN

Weizhen HE

Shumin HUO

Lingshu LI

Related Institution

Information Engineering University

Unit 61212 of the Chinese People's Liberation Army

College of Science, Zhejiang University of Science and Technology

College of Electrical Engineering, Zhejiang University

Network and Information Security Laboratory, Hangzhou Hikvision Digital Technology Co., LTD

⁰