arrow
返回

A software assignment algorithm for minimizing worm damage in networked systems

delete2017-08-01
delete8
delete
OA
AI
C
Chu‐Ren Huang
S
Sencun Zhu
Q
Quanlong Guan *
何
何永忠 (Yongzhong He)
DOI:10.1016/j.jisa.2017.05.004delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Homogeneous networked systems are at high risk of being compromised by malicious attacks that exploit a single weakness common to all. Following the survivability through heterogeneity philosophy, we present a novel approach to improving survivability of networked systems via software diversity. In this work, we propose an algorithm for assigning a number of software packages over a network of systems in an intelligent way such that machines running identical software are isolated into small islands, hence restricting the worm-like attacks from propagation. While developing the algorithm, we take into consideration not only practical constraints, including host functionality and software availability, but also weight, severity and impact range of vulnerability, well balancing and effectively minimizing the potential damage by an single attack. We also introduce possible enhancements by taking advantage of topological features of the network. Finally, we present a comparative analysis of our algorithm using simulation over various network structures. The results not only confirm the effectiveness and scalability of our algorithm, but also show its capability in creating moving attack surface. The level of heterogeneity our algorithm can actually create depends on the ratio of the number of installed software to the total number of available software. (C) 2017 Elsevier Ltd. All rights reserved.
Keyword:
Software diversity
Heterogeneity
Software assignment
Graph coloring
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Information Security and Applications 封面图
Journal of Information Security and Applications
IF:
3.7
论文数:
2.0K
被引数:
4.9K

机构

P
pennsylvania state university - university park
学者数:
1.3W
论文数: 1.0W
被引数: 24
P
Pennsylvania State University
学者数:
3.0W
论文数: 2.6W
被引数: 7.2W
P
pennsylvania commonwealth system of higher education (pcshe)
学者数:
12.9W
论文数: 11.7W
被引数: 177
P
penn state behrend
学者数:
5.8K
论文数: 4.6K
被引数: 13
学者 查看更多机构
引用论文

引用论文

Integrating cyber attacks within fault trees
err2009-09-01
err113
PREAI
errFovino, Igor Nai; Masera, Marcelo; De Cian, Alessio
err分享
err收藏
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
Pigeons play the percentages: computation of probability in a bird
err2018-05-24
err0
PREAI
errWilliam A. Roberts; Hayden MacDonald; Ka Ho Lo
err分享
err收藏
Risks of monoculture
err2004-03-01
err37
PREAI
errStamp, M
err分享
err收藏
学者 查看更多内容