Towards a theory of moving target defense

Proceedings of the ACM Conference on Computer and Communications Security

Volumn 2014-November, Issue November, 2014, Pages 31-40

  Zhuang, Rui ^a   DeLoach, Scott A ^a   Ou, Xinming ^a  

^a KANSAS STATE UNIVERSITY   (United States)

Author keywords

Computer security; Moving target defense; Network security

Indexed keywords

ENTROPY; SECURITY OF DATA;

CYBER SYSTEMS; ESSENTIAL PROBLEMS; MOVING TARGET DEFENSE; NEW APPROACHES; SELECTION PROBLEMS; STANDARD DEFINITIONS; SYSTEM CONFIGURATIONS; TIMING PROBLEM;

NETWORK SECURITY;

EID: 84937715103     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2663474.2663479     Document Type: Conference Paper

References (31)

1. E. Al-Shaer. Toward network configuration randomization for moving target defense. In Moving Target Defense, pages 153-159. Springer, 2011.
2. S. Antonatos, P. Akritidis, E. P. Markatos, and K. G. Anagnostakis. Defending against hitlist worms using network address space randomization. Computer Networks, 51(12):3471-3490, 2007.
3. D. Barrett. Hackers penetrate NASDAQ computers. http://online.wsj.com/article/Feb. 2011.
4. S. W. Boyd, G. S. Kc, M. E. Locasto, A. D. Keromytis, and V. Prevelakis. On the general applicability of instruction-set randomization. Dependable and Secure Computing, IEEE Transactions on, 7(3):255-270, 2010.
5. S. W. Boyd and A. D. Keromytis. SQLrand: Preventing SQL injection attacks. In Applied Cryptography and Network Security, pages 292-302. Springer, 2004.
6. M. Burgess and A. L. Couch. Modeling next generation configuration management tools. In LISA, pages 131-147, 2006.
7. M. Christodorescu, M. Fredrikson, S. Jha, and J. Giffin. End-to-end software diversification of Internet services. In Moving Target Defense, pages 117-130. Springer, 2011.
8. M. Dunlop, S. Groat, W. Urbanski, R. Marchany, and J. Tront. MT6D: A moving target ipv6 defense. In Military Communications Conference, 2011-MILCOM 2011, pages 1321-1326. IEEE, 2011.
9. B. Foo, Y. Wu, Y. Mao, S. Bagchi, and E. Spafford. Adepts: Adaptive intrusion response using attack graphs in an e-commence environment. In Proceedings of the International Conference on Dependable Systems and Networks, pages 508-517, Piscataway, NJ, 2005.
10. S. Groat, M. Dunlop, R. Marchany, and J. Tront. Using dynamic addressing for a moving target defense. In Proceedings of the 6th International Conference on Information Warfare and Security. Academic Conferences Limited, page 84, 2011.
11. Y. Huang and A. K. Ghosh. Introducing diversity and uncertainty to create moving attack surfaces for web services. In Moving Target Defense, pages 131-151. Springer, 2011.
12. K. Kant. Configuration management security in data center environments. In Moving Target Defense, pages 161-181. Springer, 2011.
13. G. S. Kc, A. D. Keromytis, and V. Prevelakis. Countering code-injection attacks with instruction-set randomization. In Proceedings of the 10th ACM conference on Computer and communications security, pages 272-280. ACM, 2003.
14. A. D. Keromytis, R. Geambasu, S. Sethumadhavan, S. J. Stolfo, J. Yang, A. Benameur, M. Dacier, M. Elder, D. Kienzle, and A. Stavrou. The meerkats cloud security architecture. In Dist. Computing Systems Workshops, 2012 32nd International Conference on, pages 446-450. IEEE, 2012.
15. C. Kil, J. Jun, C. Bookholt, J. Xu, and P. Ning. Address space layout permutation (aslp): Towards fine-grained randomization of commodity software. In Computer Security Applications Conference, 2006. ACSAC'06. 22nd Annual, pages 339-348. IEEE, 2006.
16. W. Lee, W. Fan, M. Miller, S. Stolfo, and E. Zadok. Towards cost-sensitive modeling for intrusion detection and response. Journal of Computer Security, 10(1-2):5-22, 2002.
17. P. K. Manadhata. Game theoretic approaches to attack surface shifting. In Moving Target Defense II, pages 1-13. Springer, 2013.
18. P. K. Manadhata and J. M. Wing. An attack surface metric. Software Engineering, IEEE Transactions on, 37(3):371-386, 2011.
19. NITRD. National Cyber Leap Year Summit 2009 co-chairs' report, networking and information technology research and development. Technical report, National Office for the Federal Networking and Information Technology Research and Development Program, Sept. 2009.
20. G. Portokalidis and A. D. Keromytis. Global ISR: Toward a comprehensive defense against unauthorized code execution. In Moving Target Defense, pages 49-76. Springer, 2011.
21. P. Sawyer, N. Bencomo, J. Whittle, E. Letier, and A. Finkelstein. Requirements-aware systems: A research agenda for re for self-adaptive systems. In Requirements Engineering Conference (RE), 2010 18th IEEE International, pages 95-103. IEEE, 2010.
22. D. Schnackenberg, H. Holiday, R. Smith, and et al. Cooperative intrusion traceback and response architecture citra. In DARPA Information Survivability Conference and Exposition I, 2001.
23. H. Shacham, M. Page, B. Pfaff, E.-J. Goh, N. Modadugu, and D. Boneh. On the effectiveness of address-space randomization. In Proceedings of the 11th ACM conference on Computer and communications security, pages 298-307. ACM, 2004.
24. C. E. Shannon. A note on the concept of entropy. Bell System Tech. J, 27:379-423, 1948.
25. M. P. Singh. Towards a science of security. http://www.computer.org/portal/web/computingnow/archive/january2013, 2013. Online, accessed June 30, 2014.
26. N. Stakhanova, S. Basu, and J. Wong. A taxonomy of intrusion response systems. International Journal of Information and Computer Security, 1(1/2):169-184, 2007.
27. P. Team. PaX address space layout randomization (ASLR), 2003.
28. S. Vikram, C. Yang, and G. Gu. Nomad: Towards non-intrusive moving-target defense against web bots. In Communications and Network Security (CNS), 2013 IEEE Conference on, pages 55-63. IEEE, 2013.
29. J. Yackoski, J. Li, S. A. DeLoach, X. Ou, and A. Singhal. Mission-oriented moving target defense based on cryptographically strong network dynamics. In CSIIRW '12: Eight Annual Workshop on Cyber Security and Information Intelligence Research, New York, USA, 2013. ACM.
30. R. Zhuang, S. A. DeLoach, and X. Ou. A model for analyzing the effect of moving target defenses on enterprise networks. In Proceedings of the 9th Cyber and Information Security Research Conference, Oak Ridge, Tennessee, April 2013. ACM.
31. R. Zhuang, S. Zhang, A. Bardas, S. A. DeLoach, X. Ou, and A. Singhal. Investigating the application of moving target defenses to network security. In Resilient Control Systems (ISRCS), 2013 6th Intl Symposium on, pages 162-169. IEEE, 2013.