Mayflies

Ahmed, Noor; Bhargava, Bharat

doi:10.1145/2995272.2995283

Cited by 14 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors of [106] proposed a bio-inspired MTD technique by using SDN to protect distributed systems utilizing short-lived nodes that are used during computation, then discarded, but which can reappear later with changed properties. The algorithm is capable of moving nodes between hardware and hypervisors and performing IP hopping, as well as changing the characteristics of the node itself, like different OS.…”

Section: Address and Port Mutationmentioning

confidence: 99%

“…MTD strategies can be applied when an active attack has been detected or modified to occur more often for hosts that are more active in the network. This approach can be found in [79,82,91,116] or [106]. Lastly, architectures utilizing per packet address or route mutation apply this MTD strategy to every single packet reaching the switch [73,93,99].…”

Section: When To Movementioning

confidence: 99%

“…OpenStack was used for [87] to make a small test environment out of three VMs. The authors of [106] used 10 physical machines with a gigabit Ethernet switch between them. Similarly, ref.…”

Section: Testbedsmentioning

confidence: 99%

See 2 more Smart Citations

A Survey on Moving Target Defense for Networks: A Practical View

2022

View full text Add to dashboard Cite

The static nature of many of currently used network systems has multiple practical benefits, including cost optimization and ease of deployment, but it makes them vulnerable to attackers who can observe from the shadows to gain insight before launching a devastating attack against the infrastructure. Moving target defense (MTD) is one of the emerging areas that promises to protect against this kind of attack by continuously shifting system parameters and changing the attack surface of protected systems. The emergence of network functions virtualization (NFV) and software-defined networking (SDN) technology allows for the implementation of very sophisticated MTD techniques. Furthermore, the introduction of such solutions as field-programmable gate array (FPGA) programmable acceleration cards makes it possible to take the MTD concept to the next level. Applying hardware acceleration to existing concepts or developing new, dedicated methods will offer more robust, efficient, and secure solutions. However, to the best of the authors’ knowledge, there are still no major implementations of MTD schemes inside large-scale networks. This survey aims to understand why, by analyzing research made in the field of MTD to show current pitfalls and possible improvements that need to be addressed in future proposals to make MTD a viable solution to address current cybersecurity threats in real-life scenarios.

show abstract

Section: Address and Port Mutationmentioning

confidence: 99%

Section: When To Movementioning

confidence: 99%

See 1 more Smart Citation

A Survey on Moving Target Defense for Networks: A Practical View

2022

View full text Add to dashboard Cite

show abstract

Moving Target, Deception, and Other Adaptive Defenses

Blakely

Horsthemke

Poczatec

et al. 2019

Advances in Information Security

View full text Add to dashboard Cite

Automated benchmark network diversification for realistic attack simulation with application to moving target defense

Bajic

Becker²

2021

Int. J. Inf. Secur.

View full text Add to dashboard Cite

With numbers of exploitable vulnerabilities and attacks on networks constantly increasing, it is important to employ defensive techniques to protect one’s systems. A wide range of defenses are available and new paradigms such as Moving Target Defense (MTD) rise in popularity. But to make informed decisions on which defenses to implement, it is necessary to evaluate their effectiveness first. In many cases, the full impact these techniques have on security is not well understood yet. In this paper we propose network defense evaluation based on detailed attack simulation. Using a flexible modeling language, networks, attacks, and defenses are described in high detail, yielding a fine-grained scenario definition. Based on this, an automated instantiator generates a wide range of realistic benchmark networks. These serve to perform simulations, allowing to evaluate the security impact of different defenses, both quantitatively and qualitatively. A case study based on a mid-sized corporate network scenario and different Moving Target Defenses illustrates the usefulness of this approach. Results show that virtual machine migration, a frequently suggested MTD technique, more often degrades than improves security. Hence, we argue that evaluation based on realistic attack simulation is a qualified approach to examine and verify claims of newly proposed defense techniques.

show abstract

Mayflies

Cited by 14 publications

References 10 publications

A Survey on Moving Target Defense for Networks: A Practical View

A Survey on Moving Target Defense for Networks: A Practical View

Moving Target, Deception, and Other Adaptive Defenses

Automated benchmark network diversification for realistic attack simulation with application to moving target defense

Contact Info

Product

Resources

About