Survey on quantitative evaluations of moving target defense

Huanruo LI; Yunfei GUO; Shumin HUO; Guozhen CHENG; Wenyan LIU

doi:10.11959/j.issn.2096-109x.2018076

您当前的位置：

首页 >

文章列表页 >

Survey on quantitative evaluations of moving target defense

论文 | 更新时间：2024-06-03

- Survey on quantitative evaluations of moving target defense
- Survey on quantitative evaluations of moving target defense
- 网络与信息安全学报 2018年4卷第9期页码：66-76
- 作者机构：
- 作者简介：
  
  [ "Huanruo LI,born in 1995,is pursuing a master degree at national digital switching system engineering technology research center. Her research interests include cyber security and active defense." ]
  [ "Yunfei GUO,born in 1963,is a PhD supervisor and a professor at national digital switching system engineering technology research center. His main research interests include cloud security,telecommunication network security and cyber security." ]
  [ "Shumin HUO,born in 1985,PhD,is a lecturer in national digital switching system engineering technology research center. His main research interests include cloud computing,software-defined network and cyber security." ]
  [ "Guozhen CHENG,born in 1986,PhD,is a lecturer in national digital switching system engineering technology research center. His main research interests include cloud computing,software-defined network and cyber security." ]
  [ "Wenyan LIU,born in 1986,PhD,is a lecturer in national digital switching system engineering technology research center. His main research interests include cloud computing,software-defined network and cyber security." ]
- 基金信息：
  
  国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003);国家重点研发计划项目;The National Key R＆D Program of China(2016YFB0800100);The National Key R＆D Program of China(2016YFB080010);国家自然科学基金资助项目;The National Science Foundation for Distinguished Young Scholars of China(61602509);河南省科技攻关计划项目;The Science and Technology Research Project of Henan Province(172102210615)
- DOI：10.11959/j.issn.2096-109x.2018076
  中图分类号：
- 网络首发：2018-09，
  
  纸质出版：2018-09-15
- 稿件说明：
移动端阅览
Huanruo LI, Yunfei GUO, Shumin HUO, 等. Survey on quantitative evaluations of moving target defense[J]. 网络与信息安全学报, 2018,4(9):66-76.

Huanruo LI, Yunfei GUO, Shumin HUO, et al. Survey on quantitative evaluations of moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 66-76.
Huanruo LI, Yunfei GUO, Shumin HUO, 等. Survey on quantitative evaluations of moving target defense[J]. 网络与信息安全学报, 2018,4(9):66-76. DOI： 10.11959/j.issn.2096-109x.2018076.

Huanruo LI, Yunfei GUO, Shumin HUO, et al. Survey on quantitative evaluations of moving target defense[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 66-76. DOI： 10.11959/j.issn.2096-109x.2018076.

摘要

Abstract:Quantitative evaluations are of great importance in network security decision-making.In recent years

moving target defense (MTD) has appeared to be a promising defense approach that blocks asymmetrical advantage of attackers and favors the defender-notwithstanding

it has a limited deployment due to its uncertain efficiency and effectiveness in defense.In that case

quantitative metrics and evaluations of MTD are essential to prove its capability and impulse its further research.This article presents a comprehensive survey on state-of-the-art quantitative evaluations.First

taxonomy of MTD techniques is stated according to the software stack model.Then

a concrete review and comparison on existing quantitative evaluations of MTD is presented.Finally

notice-worthy open issues regarding this topic are proposed along with the conclusions of previous studies.

Abstract

关键词

Keywords

references

JAJODIA S , GHOSH A K , SWARUP V , et al . Moving target defense [M ] . Springer New York , 2011 .

JAQUITH A . Security metrics:replacing fear,uncertainty,and doubt [M ] . Addison-Wesley Professional , 2007 .

OKHRAVI H , RABE M A , MAYBERRY T J , et al . Survey of cyber moving target techniques [R ] . Massachusetts Inst of Tech Lexington Lincoln Lab , 2013 .

OKHRAVI H , HOBSON T , BIGELOW D , et al . finding focus in the blur of moving-target techniques [J ] . IEEE Security ＆ Privacy , 2014 , 12 ( 2 ): 16 - 26 .

CADAR C , AKRITIDIS P , COSTA M , et al . Data randomization [R ] . 2008 .

CHANG W , STREIFF B , LIN C . Efficient and extensible security enforcement using dynamic data flow analysis [C ] // ACM Conference on Computer and Communications Security . 2008 : 39 - 50 .

ALLEN R , DOUENCE R , GARLAN D . Specifying and analyzing dynamic software architectures [C ] // International Conference on Fundamental Approaches To Software . DBLP , 1998 : 21 - 37 .

HOORN A V , WALLER J , HASSELBRING W . Kieker:a framework for application performance monitoring and dynamic software analysis [C ] // ACM/spec International Conference on PERFOR MANCE Engineering . 2012 : 247 - 248 .

ROEDER T , SCHNEIDER F B . Proactive obfuscation [J ] . ACM Transactions on Computer Systems , 2009 , 28 ( 2 ): 1973 - 1991 .

BOYD S W , KC G S , LOCASTO M E , et al . On the general applicability of instruction-set randomization [J ] . IEEE Transactions on Dependable and Secure Computing , 2010 , 7 ( 3 ): 255 - 270 .

KIL C , JUN J , BOOKHOLT C , et al . Address space layout permutation (ASLP):towards fine-grained randomization of commodity software [C ] // 22nd Annual Computer Security Applications Conference,2006 (ACSAC'06) . 2006 : 339 - 348 .

FEDCHENKO O A . WO/2014/129928 [P ] . 2006 :

ARONSON J E . A survey of dynamic network flows [J ] . Annals of Operations Research , 1989 , 20 ( 1 ): 1 - 66 .

CHANG H C , HSIEH M D , TSENG C C , et al . Dynamic network address translation system and method of transparent private network device:US,US7577144 [P ] . 2009 .

ANTONATOS S S , AKRITIDIS P , MARKATOS E P , et al . Defending against hitlist worms using network address space randomization [J ] . Computer Networks , 2007 , 51 ( 12 ): 3471 - 3490 .

ANDERSEN D G , BALAKRISHNAN H , KAASHOEK M F , et al . The case for resilient overlay networks [C ] // The Workshop on Hot Topics in Operating Systems , 2001 35 : 152 - 157 .

MARTIN L . Cyber kill chain [EB/OL ] . http://cyber.lockheedmartin.com/hubfs/Gaining_the_Advantage_Cyber_Kill_Chain.pdf http://cyber.lockheedmartin.com/hubfs/Gaining_the_Advantage_Cyber_Kill_Chain.pdf , 2014 .

OU X , SINGHAL A . The common vulnerability scoring system (CVSS) [M ] // Quantitative Security Risk Assessment of Enterprise Networks . 2012 : 9 - 12 .

MARCUS P , et al . A survey on systems security metrics [C ] // ACM Computing Surveys (CSUR) 49.4 . 2017 :62.

RAMOS A , LAZAR M , HOLANDA FILHO R , et al . Model-based quantitative network security metrics:a survey [J ] . IEEE Communications Surveys ＆ Tutorials , 2017 , 19 ( 4 ): 2704 - 2734 .

WANG L , JAJODIA S , SINGHAL A . Network security metrics [M ] . Berlin : SpringerPress , 2017 .

NGUYEN-TUONG A , EVANS D , KNIGHT J C , et al . Security through redundant data diversity [C ] // Dependable Systems and Networks With FTCS and DCC,2008.DSN 2008.IEEE International Conference on . IEEE , 2008 : 187 - 196 .

SMUTZ C , STAVROU A . Preventing exploits in microsoft office documents through content randomization [C ] // International Workshop on Recent Advances in Intrusion Detection . 2015 : 225 - 246 .

VIKRAM S , YANG C , GU G . Nomad:Towards non-intrusive moving-target defense against web bots [C ] // 2013 IEEE Conference on Communications and Network Security (CNS) . 2013 : 55 - 63 .

PATTUK E , KANTARCIOGLU M , LIN Z , et al . Preventing cryptographic key leakage in cloud virtual machines [C ] // Usenix Conference on Security Symposium . 2014 : 703 - 718 .

AMMANN P E , KNIGHT J C . Data diversity:an approach to software fault tolerance [J ] . IEEE Transactions on Computers , 1988 , 37 ( 4 ): 418 - 425 .

KONING K , BOS H , GIUFFRIDA C . Secure and efficient multi-variant execution using hardware-assisted process virtualization [C ] // 2016 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) . 2016 : 431 - 442 .

CRANE S , HOMESCU A , BRUNTHALER S , et al . Thwarting cache side-channel attacks through dynamic software diversity [C ] // NDSS . 2015 : 8 - 11 .

TROMER E , OSVIK D A , SHAMIR A . Efficient cache attacks on AES,and countermeasures [J ] . Journal of Cryptology , 2010 , 23 ( 1 ): 37 - 71 .

EVANS D , NGUYEN-TUONG A , KNIGHT J . Effectiveness of moving target defenses [C ] // Moving Target Defense . Springer New York , 2011 : 29 - 48 .

OKHRAVI H , RIORDAN J , CARTER K . Quantitative evaluation of dynamic platform techniques as a defensive mechanism [C ] // International Workshop on Recent Advances in Intrusion Detection . 2014 : 405 - 425 .

OKHRAVI H , COMELLA A , ROBINSON E , et al . Creating a cyber moving target for critical infrastructure applications using platform diversity [J ] . International Journal of Critical Infrastructure Protection , 2012 , 5 ( 1 ): 30 - 39 .

CAI G , WANG B , LUO Y , et al . A model for evaluating and comparing moving target defense techniques based on generalized stochastic petri net [C ] // Conference . Springer,Singapore , 2016 : 184 - 197 .

MARSAN M A , BALBO G , CONTE G , et al . Modelling with generalized stochastic petri nets [M ] . John Wiley ＆ Sons,Inc . 1995 .

ANDERSON N , MITCHELL R , CHEN R . Parameterizing moving target defenses [C ] // 2016 8th IFIP International Conference on New Technologies,Mobility and Security (NTMS) . 2016 : 1 - 6 .

COLLINS M P , . A cost-based mechanism for evaluating the effectiveness of moving target defenses [C ] // International Conference on Decision and Game Theory for Security . 2012 : 221 - 233 .

HONG J B , KIM D S . Assessing the effectiveness of moving target defenses using security models [J ] . IEEE Transactions on Dependable and Secure Computing , 2016 , 13 ( 2 ): 163 - 177 .

CROUSE M , PROSSER B , FULP E W . Probabilistic performance analysis of moving target and deception reconnaissance defenses [C ] // The Second ACM Workshop on Moving Target Defense . 2015 : 21 - 29 .

ZHUANG R , ZHANG S , DELOACH S A , et al . Simulation-based approaches to studying effectiveness of moving-target network defense [C ] // National Symposium on Moving Target Research . 2012 : 1 - 12 .

SCHMIDT S , BYE R , CHINNOW J , et al . Application-level simulation for network security [C ] // International Conference on Simulation TOOLS and Techniques for Communications,Networks and Systems ＆ Workshops . 2010 :33.

ZAFFARANO K , TAYLOR J , HAMILTON S . A quantitative framework for moving target defense effectiveness evaluation [C ] // The Second ACM Workshop on Moving Target Defense . 2015 : 3 - 10 .

ESKRIDGE T C , CARVALHO M M , STONER E , et al . VINE:a cyber emulation environment for MTD experimentation [C ] // ACM Workshop on Moving Target Defense . 2015 : 43 - 47 .

JONES S T , OUTKIN A V , GEARHART J L , et al . PLADD:deterring attacks on cyber systems and moving target defense [R ] . 2017 .

CONNELL W , ALBANESE M , VENKATESAN S . A framework for moving target defense quantification [M ] // ICT Systems Security and Privacy Protection . 2017 .

浏览量

1400

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据