Investigating the Application of Moving Target Defenses to Network Security

reportActive / Technical Report | Accession Number: ADA583400 | Open PDF

Abstract:

This paper presents a preliminary design for a moving-target defense 201MTD202 for computer networks to combat an attackers asymmetric advantage. The MTD system reasons over a set of abstract models that capture the networks configuration and its operational and security goals to select adaptations that maintain the operational integrity of the network. The paper examines both a simple 201purely random202 MTD system as well as an intelligent MTD system that uses attack indicators to augment adaptation selection. A set of simulation-based experiments show that such an MTD system may in fact be able to reduce an attackers success likelihood. These results are a preliminary step towards understanding and quantifying the impact of MTDs on computer networks.

Author(s):
Zhuang, Rui ; Zhang, Su ; Bardas, Alex ; Deloach, Scott A. ; Ou, Xinming ; Singhal, Anoop
Author Organization(s):
KANSAS STATE UNIV MANHATTAN
Descriptive Note:
Conference paper
Supplementary Note:
Presented the International Symposium on Resilient Cyber Systems (ISRCS) (1st) held in San Francisco, CA on 13-15 August 2013. U.S. Government or Federal Rights License
Pagination:
0009

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release; Distribution Is Unlimited.

RECORD

Collection: TR
Identifying Numbers
Contract/Grant Number(s):
FA9550-12-1-0106
Monitor Series:
AFOSR
 Subject Terms
Joint Capability Areas:
JCA_7.2.1_Mitigate Lethal Effects; JCA_7.2_Mitigate; JCA_7_Protection; JCA_6_Net Centric; JCA_6.1.3_Switching and Routing; JCA_6.1_Information Transport; JCA_5_Command and Control; JCA_5.3_Planning; JCA_4.7.2_Installation Services; JCA_4.7_Base and Installations Support; JCA_4.6.1_General Engineering; JCA_4.6_Engineering; JCA_6.4.1_Secure Information Exchange; JCA_1.2.7_Experimentation; JCA_6.4.2_Protect Data and Networks; JCA_6.4_Information Assurance; JCA_5.3.3_Develop Strategy; JCA_5.3.4_Develop Courses of Action; JCA_5.3.5_Analyze Courses of Action; JCA_8_Building Partnerships; JCA_1_Force Support
Modernization Areas:
Cyber
Communities of Interest:
Energy and Power Technologies
Descriptor(s):
*COMPUTER NETWORK SECURITY, *MOVING TARGETS, ATTACK, CONFIGURATIONS, DEFENSE SYSTEMS, INFORMATION SECURITY
Field(s)/Group(s):
Computer Systems Management and Standards
Report Date:
2013 Aug 01
Creation Date:
2013 Sep 18