Autonomic Resilient Cloud Management (ARCM) Design and Evaluation

Tunc, Cihan; Fargo, Farah; Al-Nashif, Youssif; Hariri, Salim; Hughes, John M.

doi:10.1109/iccac.2014.35

Cited by 22 publications

(4 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Before the packet arrives at the desired network, VIP is used throughout the system, and the receiver then converts the VIP to the Real IP address (RIP). To run each application, the MTD alters the implementation environment [15] [16].…”

Section: B Moving Target Defensementioning

confidence: 99%

Effective Wireless Communication Architecture for Resisting Jamming Attacks

et al. 2020

Self Cite

View full text Add to dashboard Cite

Over time, the use of wireless technologies has significantly increased due to bandwidth improvements, cost-effectiveness, and ease of deployment. Owing to the ease of access to the communication medium, wireless communications and technologies are inherently vulnerable to attacks. These attacks include brute force attacks such as jamming attacks and those that target the communication protocol (Wi-Fi and Bluetooth protocols). Thus, there is a need to make wireless communication resilient and secure against attacks. Existing wireless protocols and applications have attempted to address the need to improve systems security as well as privacy. They have been highly effective in addressing privacy issues, but ineffective in addressing security threats like jamming and session hijacking attacks and other types of Denial of Service Attacks. In this paper, we present an "architecture for resilient wireless communications" based on the concept of Moving Target Defense. To increase the difficulty of launching successful attacks and achieve resilient operation, we changed the runtime characteristics of wireless links, such as the modulation type, network address, packet size, and channel operating frequency. The architecture reduces the overhead resulting from changing channel configurations using two communication channels, in which one is used for communication, while the other acts as a standby channel. A prototype was built using Software Defined Radio to test the performance of the architecture. Experimental evaluations showed that the approach was resilient against jamming attacks. We also present a mathematical analysis to demonstrate the difficulty of performing a successful attack against our proposed architecture.

show abstract

Section: B Moving Target Defensementioning

confidence: 99%

Effective Wireless Communication Architecture for Resisting Jamming Attacks

et al. 2020

Self Cite

View full text Add to dashboard Cite

show abstract

“…Resiliency in the cloud is one of the topics that received more attention in recent research (Azab et al, 2016;Colman-Meixner et al, 2016;Tunc et al, 2014;Benameur et al, 2013). According to Colman et al (Colman-Meixner et al, 2016) any of the main cloud components can be a source of failures.…”

Section: Attack Categorizationmentioning

confidence: 99%

Systematic identification of threats in the cloud: A survey

et al. 2019

View full text Add to dashboard Cite

When a vulnerability is discovered in a system, some key questions often asked by the security analyst are what threat(s) does it pose, what attacks may exploit it, and which parts of the system it affects. Answers to those questions provide the necessary information for the security assessment and to implement effective countermeasures. In the cloud, this problem is more challenging due to the dynamic characteristics, such as elasticity, virtualization, and migration -changing the attack surface over time. This survey explores threats to the cloud by investigating the linkages between threats, attacks and vulnerabilities, and propose a method to identify threats systematically in the cloud using the threat classifications. First, we trace vulnerabilities to threats by relating vulnerabilities-to-attacks, and then relating attacks-to-threats. We have established the traceability through an extensive literature review and synthesis that resulted in a classification of attacks in the cloud, where we use the Microsoft STRIDE threat modeling approach as a guide for relating attacks to threats. Our approach is the genesis towards a concrete method for systematically identifying potential threats to assets provisioned and managed through the cloud. We demonstrate the approach through its application using a cloud deployment case study scenario.

show abstract

“…At the application level, the MTD aims at changing the execution environment used to run each application [21,22]. In this approach, replication, diversity and random shuffling techniques are used to change the application execution environment, in which different application versions are used (each version can use a different programming language and/or different operating system), and use redundant physical computing and network resources.…”

Section: Moving Target Defensementioning

confidence: 99%