Mimic defense: a designed‐in cybersecurity defense framework

Hu, Hongchao; Wu, Jiangxing; Wang, Zhenpeng; Cheng, Guangming

doi:10.1049/iet-ifs.2017.0086

Cited by 68 publications

(35 citation statements)

References 42 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The heterogeneity definition in this paper adopts the mainstream method [28], that is related to the number of common vulnerabilities between the two heterogeneous variants. The number of common vulnerabilities is positively correlated with the heterogeneity and the possibility of simultaneous destruction by the same attack.…”

Section: A Heterogeneitymentioning

confidence: 99%

“…indicates the probability of an attacker exploiting the vulnerability in heterogeneous variants to make the output incorrect. In a physical sense, we define ( ) as follows to describe the changing rate of success probability at time t [28]:…”

Section: B the Relationship Between Attack Success Probability And Hmentioning

confidence: 99%

“…where is closely related to the attacker's ability. We can set equal to 0.5 [28]. ( ) describes the probability of successful attack as the attack duration increases.…”

Section: B the Relationship Between Attack Success Probability And Hmentioning

confidence: 99%

“…To solve these problems, inspired by the mimic phenomena in the natural world, Wu et al [28] proposed a novel theory called Mimic Defense (MD). Combing "dynamic, heterogeneity and redundancy (DHR)" mechanism, MD has been applied in many fields such as Software Defined Networking (SDN) [29], encryption [30] and cloud [31].…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

A Novel Model of Mimic Defense Based on Minimal L-Order Error Probability

et al. 2020

View full text Add to dashboard Cite

Mimic defense is an active defense theory, which aims to fundamentally change the "easy to attack and difficult to defend" situation of network security. In this paper, we propose an evaluation method based on the minimum probability of successful attack, and improve the evaluation scheme of historical confidence. We combine the two evaluation schemes with the TOPSIS (technique for order performance by similarity to ideal solution) algorithm, and finally form a complete heterogeneous variant dynamic scheduling model. Different from traditional multi-mode voting algorithm, the effect of heterogeneous degree in voting is considered, and we use Bayesian estimation to obtain the optimal result in the probabilistic sense. Finally, simulation results show that the proposed algorithm can effectively enhance the dynamic and security of the mimic defense model, and give full play to the characteristics of mimic defense.

show abstract

Section: A Heterogeneitymentioning

confidence: 99%

Section: B the Relationship Between Attack Success Probability And Hmentioning

confidence: 99%

“…where is closely related to the attacker's ability. We can set equal to 0.5 [28]. ( ) describes the probability of successful attack as the attack duration increases.…”

Section: B the Relationship Between Attack Success Probability And Hmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Novel Model of Mimic Defense Based on Minimal L-Order Error Probability

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Finally, the mimic construction technology provides a feasible way to solve the general robust control problem in the network [24]. This general robust control problem can essentially cope with structural defects, such as static states, deterministic form, and similarities relative to backdoor or loophole attacks.…”

Section: Breakthroughs In Many Key Technologies Have Provided Core Fomentioning

confidence: 99%

Thoughts on the development of novel network technology

Wu¹

2018

Sci. China Inf. Sci.

Self Cite

View full text Add to dashboard Cite

In this paper, we explore potential innovations that could lead to breakthrough developments in Internet technologies. The deep integration of the Internet and economic society brings professionalized service capacity demand, while existing Internet infrastructure with its current technological systems still face a number of challenges, such as intelligence, diversification, personalization, robustness, and efficiency. First, we analyze the actual foundation of innovation and specify the basic technical features of a novel network. Then, we propose a fully dimensionally definable open architecture as the primary direction, and consider reshaping baseline technologies as a starting point and discuss the core operational mechanisms of the novel network based on such reshaped baseline technologies.

show abstract

Modelization and analysis of dynamic heterogeneous redundant system

Wang

Gai

et al. 2020

Concurrency and Computation

View full text Add to dashboard Cite

Summary With the development and popularization of Internet technology, network security has become the focus of attention. Vulnerabilities and back doors are regarded as two of the main reasons of network security problems. Dynamic heterogeneous redundant (DHR) architecture is a typical framework of cyberspace mimic defense. It can make use of untrusted hardware and software components to construct a high reliable and high security information system. In this article, a mathematical model is set up for the DHR architecture, and the system security is characterized by vulnerability consistency rate and success rate of system attack. The antiattack ability of the DHR system is analyzed using the mathematical model.

show abstract

Mimic defense: a designed‐in cybersecurity defense framework

Cited by 68 publications

References 42 publications

A Novel Model of Mimic Defense Based on Minimal L-Order Error Probability

A Novel Model of Mimic Defense Based on Minimal L-Order Error Probability

Thoughts on the development of novel network technology

Modelization and analysis of dynamic heterogeneous redundant system

Contact Info

Product

Resources

About