AMTD：一种适应性移动目标防御方法

刘丹军; 蔡桂林; 王宝生

doi:10.11959/j.issn.2096-109x.2018008

您当前的位置：

首页 >

文章列表页 >

AMTD：一种适应性移动目标防御方法

学术论文 | 更新时间：2024-06-03

- AMTD：一种适应性移动目标防御方法
- AMTD:a way of adaptive moving target defense
- 网络与信息安全学报 2018年4卷第1期页码：15-25
- 作者机构：
- 作者简介：
  
  [ "刘丹军（1994-），男，湖北潜江人，国防科技大学硕士生，主要研究方向为网络安全、二进制安全。" ]
  [ "蔡桂林（1982-），女，湖北浠水人，博士，主要研究方向为网络安全、移动目标防御。" ]
  [ "王宝生（1970-），男，河北黄骅人，博士，国防科技大学研究员，主要研究方向为网络与信息安全。" ]
- 基金信息：
  
  国家重点研发计划基金资助项目;The National Key Research and Development Program of China(2017YFB0802301);国家自然科学基金资助项目;The National Natural Science Foundation of China(61472437)
- DOI：10.11959/j.issn.2096-109x.2018008
  中图分类号： TP302
- 网络首发：2018-01，
  
  纸质出版：2018-01-15
- 稿件说明：
移动端阅览
刘丹军, 蔡桂林, 王宝生. AMTD：一种适应性移动目标防御方法[J]. 网络与信息安全学报, 2018,4(1):15-25.

Danjun LIU, Guilin CAI, Baosheng WANG. AMTD:a way of adaptive moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 15-25.
刘丹军, 蔡桂林, 王宝生. AMTD：一种适应性移动目标防御方法[J]. 网络与信息安全学报, 2018,4(1):15-25. DOI： 10.11959/j.issn.2096-109x.2018008.

Danjun LIU, Guilin CAI, Baosheng WANG. AMTD:a way of adaptive moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 15-25. DOI： 10.11959/j.issn.2096-109x.2018008.

摘要

MTD是通过动态移动目标的攻击面来改变攻击和防御不对称状态的一种新方式。MTD变换频率对于系统可用性、安全性和防御成本之间的权衡至关重要。但目前的变换频率通常根据管理者的经验确定，缺乏理论基础，无法达到可用性－安全性成本之间的权衡。为应对这一挑战，提出了适应性移动目标防御框架（AMTD），在确保系统可用的前提下，以最低的成本获取最大的系统安全性。AMTD的适应性体现在2 方面：一是防御模式的适应性，通过提出一种自适应转换策略，提供由安全警报触发的反应性防御和定时器到期事件触发的主动防御；二是变换频率的适应性，通过建立数学模型获得最优的变换频率。采取4个系列的模拟实验验证该解决方案的有效性。

Abstract

Moving target defense is a new way to change the asymmetry state between attack and defense

by dynamically moving target’s attacking surface.Frequency conversion of MTD is of great importance for the weighing between usability

security and defense cost.Nowadays

however

frequency conversion is usually determined by manager’s experience

which cannot create a balance between usability and security cost for the lack of theory basis.An adaptive moving target defense framework(AMTD)was proposed.AMTD can maximize system security at the lowest cost while ensuring that the system is available.The adaptability of AMTD has two modes.Firstly

the defense mode

it contains an adaptive conversion strategy to provide reacting defense triggered by security alerts and active defense triggered by timer expiration events.The other mode is the frequency conversion

which obtain the optimal conversion frequency by establishing mathematical models.Four series of simulation experiments were taken to verify the effectiveness of the solution.

关键词

Keywords

references

LIU Y , PENG W , SU J . A study of IP prefix hijacking in cloud computing networks [J ] . Security and Communication Networks , 2014 , 7 ( 11 ): 2201 - 2210 .

WANG T , WANG H , LIU B , et al . Further analyzing the sybil attack in mitigating peer-to-peer botnets [J ] . KSII Transactions on Internet ＆ Information Systems , 2012 , 6 ( 10 ).

WANG F , WANG H , WANG X , et al . A new multistage approach to detect subtle DDoS attacks [J ] . Mathematical and Computer Modelling , 2012 , 55 ( 1 ): 198 - 213 .

ZDNet C , ZACK W . PRISM:here’s how the NSA wiretapped the Internet [EB/OL ] . http://www.zdnet.com/article/prism-heres-how-thensa-wiretapped-the-internet/ http://www.zdnet.com/article/prism-heres-how-thensa-wiretapped-the-internet/ .

CODENOMICON . The heartbleed bug [EB/OL ] . http://heartbleed.com http://heartbleed.com .

CLARK A , SUN K , POOVENDRAN R . Effectiveness of IP address randomization in decoy-based moving target defense [C ] // The 52nd IEEE Conference on Decision and Control . 2013 : 678 - 685 .

MANADHATA P , . Game theoretic approaches to attack surface shifting [M ] // Moving Target Defense II:Application of Game Theory and Adversarial Modeling . 2013 : 1 - 13 .

CROUSE M , PROSSER B , FULP E . Probabilistic performance analysis of moving target and deception reconnaissance defenses [C ] // The Second ACM Workshop on Moving Target Defense . 2015 : 21 - 29 .

ZHU Q , BAŞAR T , . Game-theoretic approach to feedback-driven multi-stage moving target defense [C ] //. The 4th International Conference on Decision and Game Theory for Security-Volume 8252 .

CAI G L , WANG B S , HU W , et al . Moving target defense:state of the art and characteristics [J ] . Frontiers of Information Technology＆ Electronic Engineering , 2016 , 17 ( 11 ): 1122 - 1153 .

NITRDSubcommittee National cyber leap year summit 2009 co-chairs’ report [EB/OL ] . https://www.nitrd.gov/nitrdgroups/index.php?title=Category:National_Cyber_Leap_Year_Summit_ 2009 https://www.nitrd.gov/nitrdgroups/index.php?title=Category:National_Cyber_Leap_Year_Summit_ 2009 .

AZAB M , HASSAN R , ELTOWEISSY M . ChameleonSoft:a moving target defense system [C ] // The 7th International Conference on Collaborative Computing:Networking,Applications and Worksharing (CollaborateCom) . 2011 : 241 - 250 .

OKHRAVI H , COMELLA A , ROBINSON E , et al . Creating a cyber moving target for critical infrastructure applications [M ] // Critical Infrastructure Protection V . Berlin Heidelberg:Springer , 2011 : 107 - 123 .

HUANG Y , GHOSH A . Introducing diversity and uncertainty to create moving attack surfaces for Web services [M ] // Moving Target Defense:Creating Asymmetric Uncertainty for Cyber Threats . 2011 : 131 - 151 .

DEBROY S , CALYAM P , NGUYEN M , et al . Frequency-minimal moving target defense using software-defined networking [C ] // 2016 International Conference on Computing,Networking and Communications (ICNC) . 2016 : 1 - 6 .

LUO Y , WANG B , WANG X , et al . RPAH:random port and address hopping for thwarting internal and external adversaries [C ] // 2015 IEEE Trustcom/BigDataSE/ISPA . 2015 : 263 - 270 .

周志华 . 机器学习 [M ] . 北京 : 清华大学出版社 , 2016 .

ZHOU Z H . Machine learning [M ] . Beijing : Tsinghua University PressPress , 2016 .

BERAUD P , CRUZ A , HASSELL S , et al . Using cyber maneuver to improve network resiliency [C ] // 2011 Military Communications Conference (MILCOM 2011) . 2011 : 1121 - 1126 .

KUHL M E , KISTNER J , COSTANTINI K , et al . Cyber attack modeling and simulation for network security analysis [C ] // The 39th Conference on Winter Simulation . 2007 : 1180 - 1188 .

BERAUD P , CRUZ A , HASSELL S , et al . Cyber defense network maneuver commander [C ] // 2010 IEEE International Carnahan Conference on Security Technology (ICCST) . 2010 : 112 - 120 .

浏览量

3063

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向网络层的动态跳变技术研究进展

容器云中基于Stackelberg博弈的动态异构调度方法

面向对抗样本攻击的移动目标防御

敌对攻击环境下基于移动目标防御的算法稳健性增强方法

面向SDN的移动目标防御技术研究进展