.png){kind=icon}
返回
Time-Based Moving Target Defense Using Bayesian Attack Graph Analysis
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2023.3269018.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The moving target defense (MTD) is a proactive cybersecurity defense technique that constantly changes potentially vulnerable points to be attacked, to confuse the attackers, making it difficult for attackers to infer the system configuration and nullify reconnaissance activities to a victim system. We consider an MTD strategy for software-defined networking (SDN) environment where every SDN switch is controlled by a central SDN controller. As the MTD may incur excessive usage of the network/system resources for cybersecurity purposes, we propose to perform the MTD operations adaptively according to the security risk assessment based on a Bayesian attack graph (BAG) analysis. For accurate BAG analysis, we model random and weakest-first attack behaviors and incorporate the derived analytical models into the BAG analysis. Using the BAG analysis result, we formulate a knapsack problem to determine the optimal set of vulnerabilities to be reconfigured under a constraint of SDN reconfiguration overhead. The experiment results prove that the proposed MTD strategy outperforms the full MTD and random MTD counterparts in terms of the maximum/average of attack success probabilities and the number of SDN reconfiguration updates.
Keyword:
Security
IP networks
Bayes methods
Behavioral sciences
Computer security
Analytical models
Risk management
Moving target defense
Bayesian attack graph
software-defined networking
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
分享收藏Malonate-based copper(II) coordination compounds: ferromagnetic coupling controlled by dicarboxylates.png)
Polyhedron
PolyhedronIF0
PREAI
分享收藏DSEOM: A Framework for Dynamic Security Evaluation and Optimization of MTD in Container-Based CloudDSEOM: 基于容器的云MTD动态安全评估和优化框架
OAAI
OAAI分享收藏
查看更多内容