.png){kind=icon}
返回
A model-based mode-switching framework based on security vulnerability scores
.png){kind=icon}
OA
AI
DOI：10.1016/j.jss.2023.111633.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Software vulnerabilities can affect critical systems within an organization impacting processes, work-flows, privacy, and safety. When a software vulnerability becomes known, affected systems are at risk until appropriate updates become available and eventually deployed. This period can last from a few days to several months, during which attackers can develop exploits and take advantage of the vulnerability. It is tedious and time-consuming to keep track of vulnerabilities manually and perform necessary actions to shut down, update, or modify systems. Vulnerabilities affect system components, such as a web server, but sometimes only target specific versions or component combinations.In this paper, we propose a novel approach for automated mode switching of software systems to support system administrators in dealing with vulnerabilities and reducing the risk of exposure. We rely on model-driven techniques and use a multi-modal architecture to react to discovered vulnerabilities and provide automated contingency support. We have developed a dedicated domain-specific language to describe potential mitigation as mode switches. We have evaluated our approach with a web server case study, analyzing historical vulnerability data. Based on the vulnerabilities scores sum, we demonstrated that switching to less vulnerable modes reduced the attack surface in 98.9% of the analyzed time.Editor's note: Open Science material was validated by the Journal of Systems and Software Open Science Board.(c) 2023 The Author(s). Published by Elsevier Inc. This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/).
Keyword:
Mode switching
Security
Resilience
Domain-specific languages
Vulnerabilities
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
4.1
论文数:
5.5K
被引数:
8.4K
机构
引用论文
.png){kind=icon}
分享收藏Model-based security engineering for cyber-physical systems: A systematic mapping study基于模型的网络物理系统安全工程: 系统映射研究
PREAI
分享收藏Photothermal Switching Based on Silicon Mach–Zehnder Interferometer Integrated With Light Absorber
OAAI
OAAI分享收藏Evolution of software in automated production systems: Challenges and research directions自动化生产系统中软件的发展: 挑战与研究方向OAAI
OAAI分享收藏
查看更多内容