Toward effectiveness and agility of network security situational awareness using moving target defense (MTD)

Linqiang Ge; Wei Yu; Dan Shen; Genshe Chen; Khanh Pham; Erik Blasch; Chao Lu

doi:10.1117/12.2050782

3 June 2014 Toward effectiveness and agility of network security situational awareness using moving target defense (MTD)

Linqiang Ge, Wei Yu, Dan Shen, Genshe Chen, Khanh Pham, Erik Blasch, Chao Lu

Author Affiliations +

Proceedings Volume 9085, Sensors and Systems for Space Applications VII; 90850Q (2014) https://doi.org/10.1117/12.2050782
Event: SPIE Defense + Security, 2014, Baltimore, MD, United States

Abstract

Most enterprise networks are built to operate in a static configuration (e.g., static software stacks, network configurations, and application deployments). Nonetheless, static systems make it easy for a cyber adversary to plan and launch successful attacks. To address static vulnerability, moving target defense (MTD) has been proposed to increase the difficulty for the adversary to launch successful attacks. In this paper, we first present a literature review of existing MTD techniques. We then propose a generic defense framework, which can provision an incentive-compatible MTD mechanism through dynamically migrating server locations. We also present a user-server mapping mechanism, which not only improves system resiliency, but also ensures network performance. We demonstrate a MTD with a multi-user network communication and our data shows that the proposed framework can effectively improve the resiliency and agility of the system while achieving good network timeliness and throughput performance.

Citation Download Citation

Linqiang Ge, Wei Yu, Dan Shen, Genshe Chen, Khanh Pham, Erik Blasch, and Chao Lu "Toward effectiveness and agility of network security situational awareness using moving target defense (MTD)", Proc. SPIE 9085, Sensors and Systems for Space Applications VII, 90850Q (3 June 2014); https://doi.org/10.1117/12.2050782

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available