An MTD-Based Self-Adaptive Resilience Approach for Cloud Systems

Villarreal-Vasquez, Miguel; Bhargava, Bharat; Angin, Pelin; Ahmed, Noor; Goodwin, Daniel; Brin, Kory; Kobes, Jason

doi:10.1109/cloud.2017.101

Cited by 6 publications

(4 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With information about a t and ψ f (t) , we also update our estimate of Pr[a i , ψ f (i) = v, ψ] for all rounds i < t using the above expression. Using these updated probability estimates, we recompute the reward estimates at the end of each round using (4). Note that when an attacker type does not randomize and plays a pure strategy, the reward estimates computed using (5) will reflect this pure strategy i.e.…”

Section: Fpl-maxminmentioning

confidence: 99%

“…The consequences of failure go beyond financial loss and could result in a breach of privacy or a denial of service, significantly harming the users. Moving Target Defense has established itself as a potential solution to combat threats observed in web applications [1,2], operating systems [3], cloud-based services [4,5], etc. Instead of maintaining a single configuration, analysts can maintain multiple configurations of the system and alternate between them.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Learning Effective Strategies for Moving Target Defense with Switching Costs

Viswanathan¹,

Bose²,

Paruchuri³

2023

Preprint

View full text Add to dashboard Cite

Moving Target Defense (MTD) has emerged as a key technique in various security applications as it takes away the attacker's ability to perform reconnaissance for exploiting a system's vulnerabilities. However, most of the existing research in the field assumes unrealistic access to information about the attacker's motivations and/or actions when developing MTD strategies. Many of the existing approaches also assume complete knowledge regarding the vulnerabilities of a system and how each of these vulnerabilities can be exploited by an attacker. In this work, we aim to create algorithms that generate effective Moving Target Defense strategies that do not rely on prior knowledge about the attackers. Our work assumes that the only way the defender receives information about its own reward is via interaction with the attacker in a repeated game setting. Depending on the amount of information that can be obtained from the interactions, we devise two different algorithms using multi-armed bandit formulation to identify efficient strategies. We then evaluate our algorithms using data mined from the National Vulnerability Database to showcase that they match the performance of the state-of-the-art techniques, despite using a lot less amount of information.

show abstract

Section: Fpl-maxminmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Learning Effective Strategies for Moving Target Defense with Switching Costs

Viswanathan¹,

Bose²,

Paruchuri³

2023

Preprint

View full text Add to dashboard Cite

show abstract

“…The main disadvantage of trust-establishing solutions is the requirement to either rely on a pre-shared knowledge about nodes (certificates) or collect reputation statistics at run-time. An alternative trustmaintaining approach based on the moving target concept was proposed in [44]. Trust-less system operation approaches tend to keep system operation without relying on the honesty of remote nodes.…”

Section: A Trustworthinessmentioning

confidence: 99%

Architectural Resilience in Cloud, Fog and Edge Systems: A Survey

Prokhorenko

Babar

2020

IEEE Access

View full text Add to dashboard Cite

An increasing number of large-scale distributed systems are being built by incorporating Cloud, Fog, and Edge computing. There is an important need of understanding how to ensure the resilience of systems built using Cloud, Fog, and Edge computing. This survey reports the state-of-the-art of architectural approaches that have been reported for ensuring the resilience of Cloud-, Fog-and Edge-based systems. This work reports a flexible taxonomy for reviewing architectural resilience approaches for distributed systems. In addition, this work also presents a capability-based cyber-foraging framework intended to improve the overall system resilience in the context of a physical node's capabilities. This survey also highlights the trust-related issues and solutions in the context of system resilience and reliability. This survey will help improve the understanding of the current state of system resilience solutions and raise awareness about the issues related to physical capabilities and trust management in the context of distributed systems resilience.

show abstract

“…al. argue that the typical replication techniques employed for cloud resilience increase the attack surface of an application and thus are detrimental [122]. They propose a solution which uses Moving Target Defence (MTD).…”

Section: Cloud Managementmentioning

confidence: 99%

On Resilience in Cloud Computing

Welsh

Benkhelifa

2020

ACM Comput. Surv.

View full text Add to dashboard Cite

Cloud infrastructures are highly favoured as a computing delivery model worldwide, creating a strong societal dependence. It is therefore vital to enhance their resilience, providing persistent service delivery under a variety of conditions. Cloud environments are highly complex and continuously evolving. Additionally, the plethora of use-cases ensures requirements for persistent service delivery vary. As a contribution to knowledge, this work surveys resilience techniques for cloud environments. We apply a novel perspective using a layered model of traditional and emerging cloud paradigms. Works are then classified according to the Resilinets model. For each layer, the most common techniques with limitations are derived including an actor’s strength in influencing resilience in the cloud with each technique. We conclude with some future challenges to the field of resilient cloud computing.

show abstract

An MTD-Based Self-Adaptive Resilience Approach for Cloud Systems

Cited by 6 publications

References 11 publications

Learning Effective Strategies for Moving Target Defense with Switching Costs

Learning Effective Strategies for Moving Target Defense with Switching Costs

Architectural Resilience in Cloud, Fog and Edge Systems: A Survey

On Resilience in Cloud Computing

Contact Info

Product

Resources

About