Investigating the application of moving target defenses to network security

Proceedings - 2013 6th International Symposium on Resilient Control Systems, ISRCS 2013

Volumn , Issue , 2013, Pages 162-169

  Zhuang, Rui ^a   Zhang, Su ^a   Bardas, Alex ^a   DeLoach, Scott A ^a   Ou, Xinming ^a   Singhal, Anoop ^b  

^a KANSAS STATE UNIVERSITY   (United States)

^b NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

Author keywords

adaptive security; moving target; network security

Indexed keywords

CONTROL SYSTEMS;

ABSTRACT MODELS; ADAPTIVE SECURITY; MOVING TARGET DEFENSE; MOVING TARGETS; PRELIMINARY DESIGN; SECURITY GOALS;

NETWORK SECURITY;

EID: 84890086466     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISRCS.2013.6623770     Document Type: Conference Paper

References (19)

1. Mandiant Intelligence Center, "APT1: Exposing one of China's cyber espionage units," Mandiant, Tech. Rep. , 2013.
2. D. Barrett, "Hackers penetrate NASDAQ computers," http://online. wsj. com/article/, Feb. 2011.
3. NITRD, "National Cyber Leap Year Summit 2009 co-chairs' report, networking and information technology research and development," National Office for the Federal Networking and Information Technology Research and Development Program, Tech. Rep. , Sep. 2009.
4. C. Zhong and S. A. DeLoach. , "An investigation of reorganization algorithms. " in the International Conference on Artificial Intelligence (IC-AI'2006). , June 2006.
5. P. Ammann, D. Wijesekera, and S. Kaushik, "Scalable, graphbased network vulnerability analysis. " in Proceedings of 9th ACM Conference on Computer and Communications Security, nov 2002.
6. S. Jajodia, S. Noel, and B. O'Berry. , "Topological analysis of network attack vulnerability. " Managing Cyber Threats: Issues, Approaches and Challanges, 2003.
7. R. Lippmann, K. Ingols, C. Scott, K. Piwowarski, K. Kratkiewicz, M. Artz, and R. K. Cunningham. , "Evaluating and strengthening enterprise network security using attack graphs. " MIT Lincoln Laboratory, Tech. Rep. , 2005.
8. X. Ou, W. F. Boyer, and M. A. McQueen. , "A scalable approach to attack graph generation. " in 13th ACM Conference on Computer and Communications Security, Oct 2006.
9. C. Phillips and L. P. Swiler, "Graph-based system for network-vulnerability analysis. " in NSPW 98: Proceedings of the 1998 Workshop on New Security Paradigms, 1998.
10. O. Sheyner, J. Haines, S. Jha, R. Lippmann, and J. M. Wing, "Automated generation and analysis of attack graphs. " in the IEEE Symposium on Security and Privacy, may 2002.
11. S. Schmidt, R. Bye, J. Chinnow, K. Bsufka, A. Camtepe, and S. Albayrak, "Application-level simulation for network security," SIMULATION, vol. 86, pp. 311-330, 2010.
12. J. Yackoski, P. Xie, H. Bullen, J. Li, and K. Sun, "A self-shielding dynamic network architecture," Proceedings of IEEE MILCOM, pp. 1381-1386, 2011.
13. J. Yackoski, J. Li, S. A. DeLoach, X. Ou, and A. Singhal, "Mission-oriented moving target defense based on cryptographically strong network dynamics," in CSIIRW '12: Eight Annual Workshop on Cyber Security and Information Intelligence Research. New York, USA: ACM, 2013.
14. Openstack, "Openstack: The folsom release," http://www. openstack. org/software/, july 1, 2013.
15. D. Kewley, R. Fink, J. Lowry, and M. Dean, "Dynamic approaches to thwart adversary intelligence gathering,," Proceedings of the DARPA Information Survivability Conference & Exposition, pp. 176-185, 2001.
16. J. Michalski, C. Price, E. Stanton, E. L. Chua, K. Seah, W. Y. Heng, and T. C. Pheng, "Final report for the network security mechanisms utilizing network address translation LDRD project," Sandia National Laboratories, Tech. Rep. Technical Report SAND2002-3613, November 2002.
17. S. Antonatos, P. Akritidis, E. Markatos, and K. Anagnostakis, "Defending against hitlist worms using network address space randomization," Comput. Netw. , vol. 51, no. 12, pp. 3471-3490, Aug. 2007.
18. M. D. Compton, "Improving the quality of service and security of military networks with a network tasking order process," Ph. D. dissertation, Air Force Institute of Technology, 2009.
19. E. Al-Shaer, "Toward network configuration randomization for moving target defense," in Moving Target Defense, ser. Advances in Information Security, S. Jajodia, A. K. Ghosh, V. Swarup, C. Wang, and X. S. Wang, Eds. Springer New York, 2011, vol. 54, pp. 153-159.