Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)

Procedia Computer Science

Volumn 28, Issue , 2014, Pages 62-70

  Thebeau II, Danny ^a   Reidy, Benjamin ^a   Valerdi, Ricardo ^a   Gudagi, Avinash ^a   Kurra, Hemayamini ^a   Al Nashif, Youssif ^a   Hariri, Salim ^a   Sheldon, Frederick ^b  

^a University of Arizona   (United States)

^b OAK RIDGE NATIONAL LABORATORY   (United States)

Author keywords

Attack Surface; Availability; Confidentiality; Integrity; Moving Target Defense (MTD); Resiliency; Software Behavior Encryption (SBE); Storage Dynamic Encryption (SDE); Survivability

Indexed keywords

APPLICATION PROGRAMS; AVAILABILITY; NETWORK SECURITY;

CONFIDENTIALITY; INTEGRITY; MOVING TARGET DEFENSE; RESILIENCY; SOFTWARE BEHAVIOR; STORAGE DYNAMICS; SURVIVABILITY;

CRYPTOGRAPHY;

EID: 84897986856     PISSN: 18770509     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1016/j.procs.2014.03.009     Document Type: Conference Paper

References (29)

1. Lt Gen Cardon E, Contemporary Military Forum - Building the Army's Cyber Forces Globally Responsive, Regionally Engaged, http //www dvidshub net/video/304621/contemporary-military-forum-buildmg-armys-cyber-forcesglobally- responsive-regionallyengaged# UoKdGp Tn IU, Defense Video & Imagery Distribution System, October 24, 2013
2. Granee T, Mell P, The NIST Definition of Cloud Computing, Special Publication 800-145, 2011
3. LandWarNet 2020 and Beyond Enterprise Architecture v1 0, US Army, 2013
4. Thin/Zero Client Computing Reference Architecture v1 0, US Army, 2013
5. Alnashif Y, Eltoweissy M, Hariri S, Sheldon F, Valerdi R DDDAS-based Resilient Cyberspace (DRCS), 2012
6. Recorded Future Creating an insightful world, http //analysisintelligence com/about/, October 2013
7. Conflict Breeds Cyber Attacks, http //analysisintelligence com/cyber-defense/conflict-breeds-cyber-attacks/, 13 October 2013
8. D'souza G Resilient Cloud Application Services, Master of Science Thesis, University of Arizona, Tucson, 2013
9. Falkowitz O, Holden C, Combating Socially Engineered Cyber Attacks With Web Intelligence, Wednesday, September 4 at 1 00 PM EST webcast 2013
10. McManus H, Richards M, Ross A, Hastings D, A Framework for Incorporating "ihties " in Tradespace Studies, 2007
11. Managing Information Security Risk Organization, Mission, and Information System View, National Institute of Standards and Technology (NIST) SP 800-39, page B-5, March 2011
12. Measurement Frameworks and Metrics for Resilient Networks and Services - Technical report, European Network and Information Security Agency (ENISA), February 2011 p 9
13. Manadhat P, Wing J, An Attack Surface Metric, School of Computer Science Carnegie Mellon University Pittsburgh, PA, November 2008
14. Howard M, Pincus J, Wing J, Measuring Relative Attack Surfaces, 2005
15. Common Vulnerabilities and Exposures, http //cve mitre org/, October 2013
16. Information Assurance, Army Regulation 25-2, March 2009
17. Clarkson M, Shneider F, Quantification of Integrity, 23rd IEEE Computer Security Foundations Symposium, 2010
18. Randell B, System Structure for Software Fault Tolerance, IEEE Transactions on Software Engineering, Vol SE-1, NO 2, June 1975
19. Highleyman W, Calculating Availability Redundant Systems, Sombers Associates, Inc, the Availability Digest, October 2006
20. Ford R, Carvalho M, Mayron L, Bishop M, Resilience is More than Availability, September 2011
21. Cppcheck A tool for static C/C++ code analysis, http //cppcheck sourceforge net, October 2013
22. Flawfinder, http //sourceforge net/projects/flawfmder/, October 2013
23. The Operations Process, Army Doctrine Publications 5-0, May 2012
24. Blanchard B, Fabrycky W, Systems Engineering and Analysis, 5th ed, Prentice Hall, 2011
25. J A Simpson and E S C Weiner, editors The Oxford English Dictionary, Clarendon Press, Oxford, UK, second edition, 1989
26. Ford R, Carvalho M, Mayron L, Bishop M, Toward Metrics for Cyber Resilience, 2012
27. cvechecker A local CVE checker tool, http //cvechecker sourceforge net/, October 2013
28. Kurra H, Al-Nashif Y, Hanri S, Resilient Cloud Data Storage Services, 2013
29. NVD Common Vulnerability Scoring System Support v2, htt //nvd nist gov/evss cfm, October 2013