Performance Modeling of Moving Target Defenses

Connell, Warren; Menascé, Daniel A.; Albanese, Massimiliano

doi:10.1145/3140549.3140550

Cited by 32 publications

(30 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To ensure that there is always a minimum number of resources available to handle service requests, we consider policies that limit the maximum number c * of resources being reconfigured. Note that if c * = c (i.e., the unlimited case), the results obtained here revert to our previous simpler model [10]. If c * resources are .…”

Section: Quantitative Analysis Of Mtdssupporting

confidence: 59%

“…In our previous work [10], we proposed a quantitative analytic model for assessing the resource availability and performance of MTDs, and a simple method for determining the highest possible reconfiguration rate, and thus the smallest probability of attacker's success, that meets performance and stability constraints. Although that preliminary framework represents a first important step towards a comprehensive solution to the MTD quantification problem, several limitations still exist.…”

Section: Introductionmentioning

confidence: 99%

“…Although that preliminary framework represents a first important step towards a comprehensive solution to the MTD quantification problem, several limitations still exist. As shown in [10], the availability of computational resources may drop significantly if too many resources are being reconfigured at the same time, causing a backlog of service requests and response time peaks. As a simple method to prevent a similar scenario, we defined a stability metric and devised a method to determine the maximum reconfiguration rate that meets stability constraints.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Performance Modeling of Moving Target Defenses with Reconfiguration Limits

Connell

Menascé

Albanese

2021

IEEE Trans. Dependable and Secure Comput.

Self Cite

View full text Add to dashboard Cite

Moving Target Defense (MTD) has recently emerged as a game changer in the security landscape due to its proven potential to introduce asymmetric uncertainty that gives the defender a tactical advantage over the attacker. Many different MTD techniques have been developed, but, despite the huge progress made in this area, critical gaps still exist with respect to the problem of studying and quantifying the cost and benefits of deploying MTDs. In fact, all existing techniques address a very narrow set of attack vectors, and, due to the lack of shared metrics, it is difficult to quantify and compare multiple techniques. Building on our preliminary work in this field, we propose a quantitative analytic model for assessing the resource availability and performance of MTDs, and a method for maximizing a utility function that captures the tradeoffs between security and performance. The proposed model generalizes our previous model and can be applied to a wider range of MTDs and operational scenarios to improve availability and performance by imposing limits on the maximum number of resources that can be in the process of being reconfigured. The analytic results are validated by simulation and experimentation, confirming the accuracy of our model.

show abstract

Section: Quantitative Analysis Of Mtdssupporting

confidence: 59%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Performance Modeling of Moving Target Defenses with Reconfiguration Limits

Connell

Menascé

Albanese

2021

IEEE Trans. Dependable and Secure Comput.

Self Cite

View full text Add to dashboard Cite

show abstract

“…al. [113] considered availability as an important metric for analyzing impact of MTD countermeasure. The system reconfiguration rate α is modeled as a function of system resources using Continuous Time Markov Chain (CTMC) modeling.…”

Section: B Quantitative Metricsmentioning

confidence: 99%

A Survey of Moving Target Defenses for Network Security

Sengupta

Chowdhary

Sabur

et al. 2020

IEEE Commun. Surv. Tutorials

182

View full text Add to dashboard Cite

Network defense techniques based on traditional tools, techniques, and procedures (TTP) fail to account for the attacker's inherent advantage present due to static nature of network services and configurations. Moving Target Defense (MTD), on the other hand, provides an intelligent countermeasure by dynamically re-configuring the underlying systems, thereby reducing the effectiveness of cyber attacks. In this survey, we analyze the recent advancements made in the development of MTD tools, techniques and procedures (TTP) and highlight how these defenses can be made more effective with the use of artificial intelligence techniques for decision making. We first define a unified formal notation for MTDs that can capture different aspects of such defenses. We then categorize these defenses into different sub-classes depending on how they answer the three questions-what to move, when to move and how to moveshowcasing how game theoretic strategies can effectively answer the latter question. To understand the usefulness of these defense methods, we study the implementation of such MTD techniques. We find that (relatively) new networking technologies such as Software Defined Networking (SDN) and Network Function Virtualization (NFV) provide effective means for implementing these dynamic defense methods. To encourage researchers and industry experts in using such defenses, we highlight industry use-cases and discuss the practicality and maturity of these defenses. To aid readers who want to test or deploy MTD techniques, we highlight existing MTD test-beds. Our survey then performs both a qualitative and quantitative analysis to better understand the effectiveness of these MTDs in terms of security and performance. To that extent, we use well-defined metrics such as risk analysis, performance costs for qualitative evaluation and metrics based on Confidentiality, Integrity, Availability (CIA), attack representation, QoS impact, targeted threat models and defense cost for quantitative evaluation. Finally, we conclude by summarizing research opportunities that our survey elucidates.

show abstract

“…The conclusion relies on the hypothesis that higher the diversity, stronger the security. Reference [21] proposes a quantitative analytical model based on the birth and death process to determine the best reconfiguration rate. It has taken a totally heterogeneity as premise and the reconfiguration rate has become the representative of the diversity in the work.…”

Section: Related Workmentioning

confidence: 99%

A Diversity Metric Based Study on the Correlation between Diversity and Security

Tong

Guo

et al. 2019

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

Software diversity can be utilized in cyberspace security to defend against the zero-day attacks. Existing researches have proved the effectiveness of diversity in bringing security benefits, but few of them touch the problem that whether there is a positive correlation between the security and the diversity. In addition, there is little guidance on how to construct an effective diversified system. For that, this paper develops two diversity metrics based on system attribute matrix, proposes a diversity measurement and verifies the effectiveness of the measurement. Through several simulations on the diversified systems which use voting strategy, the relationship between diversity and security is analyzed. The results show that there is an overall positive correlation between security and diversity. Though some cases are against the correlation, further analysis is made to explain the phenomenon. In addition, the effect of voting strategy is also discussed through simulations. The results show that the voting strategy have a dominant impact on the security, which implies that security benefits can be obtained only with proper strategies. According to the conclusions, some guidance is provided in constructing a more diversified as well as securer system.

show abstract

Performance Modeling of Moving Target Defenses

Cited by 32 publications

References 20 publications

Performance Modeling of Moving Target Defenses with Reconfiguration Limits

Performance Modeling of Moving Target Defenses with Reconfiguration Limits

A Survey of Moving Target Defenses for Network Security

A Diversity Metric Based Study on the Correlation between Diversity and Security

Contact Info

Product

Resources

About