Integrated moving target defense and control reconfiguration for securing Cyber-Physical systems

Potteiger, Bradley; Zhang, Zhenkai; Koutsoukos, Xenofon

doi:10.1016/j.micpro.2019.102954

Cited by 17 publications

(20 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sensor networks using IoT technology to form ad-hoc networks and exchange data adapt the network topology to ensure safe and secure operation in a changing environment (Veledar et al, 2019;Potteiger et al, 2020;Teimourikia and Fugini, 2017;Settanni et al, 2018a). Domain-independent papers in most cases cannot easily focus on safety and security in a way to fulfill our inclusion criteria.…”

Section: Overview Of Included Papersmentioning

confidence: 99%

“…Multiple controllers are used, for example, to switch to a safe but worseperforming controller if another better-performing but unreliable control strategy (e.g. using trained neural networks) fails (Knight and Strunk, 2004;Potteiger et al, 2020).…”

Section: Adaptation Strategiesmentioning

confidence: 99%

“…to prevent the leaking of confidential and personal data. Decryption and checking the integrity of application components before loading them (Potteiger et al, 2020) can ensure, that after resetting the software, a known and secure state is reached. Instead of or in addition to blocking normal communication, establishing a hidden communication channel (Yoon et al, 2017) can help keep or regain control of the system in case of an attack.…”

Section: Adaptation Strategiesmentioning

confidence: 99%

“…Only a few papers mention conditions under which the success of the self-adaptation cannot be guaranteed (Liu et al, 2017;Potteiger et al, 2020;Zhu et al, 2020;Knight and Strunk, 2004), or checks on the self-adaptation (Causevic et al, 2019). Especially if no specific adaptation architecture is mentioned, the adaptation is implicitly seen as atomic, instantaneous, and guaranteed to succeed, then showing that after the successful adaptation a safe and secure state can be reached.…”

Section: Limitations To Self-adaptationmentioning

confidence: 99%

See 3 more Smart Citations

A Systematic Review on Security and Safety of Self-Adaptive Systems

Pekaric¹,

Groner²,

Witte³

et al. 2022

SSRN Journal

View full text Add to dashboard Cite

Section: Overview Of Included Papersmentioning

confidence: 99%

Section: Adaptation Strategiesmentioning

confidence: 99%

Section: Adaptation Strategiesmentioning

confidence: 99%

Section: Limitations To Self-adaptationmentioning

confidence: 99%

See 2 more Smart Citations

A Systematic Review on Security and Safety of Self-Adaptive Systems

Pekaric¹,

Groner²,

Witte³

et al. 2022

SSRN Journal

View full text Add to dashboard Cite

“…MTD has also been adopted for cloud security [10,11]. The authors in [12] exploited MTD for the security of cyber-physical systems. There is a recent trend of the adaptation of MTD for wireless ad hoc networks as well [13,14].…”

Section: Introductionmentioning

confidence: 99%

Towards Enhancing the Endpoint Security using Moving Target Defense (Shuffle-based Approach) in Software Defined Networking

Hyder

Waseemullah

Farooq

et al. 2021

Eng. Technol. Appl. Sci. Res.

View full text Add to dashboard Cite

Static IP addresses make the network vulnerable to different attacks and once the machines are compromised, any sensitive information within the network can be spoofed. Moving Target Defense (MTD) provides an efficient mechanism for proactive security by constantly changing different system attributes. Software Defined Networks (SDNs) provide greater flexibility in designing security solutions due to their centralized management and programming capabilities. In this paper, a mechanism for the protection of endpoint security is developed using IP address host shuffling. In the proposed approach, the real IP address of the host is masked and a virtual IP address is assigned. The virtual IPs are mined from the pool of unassigned IP addresses. The address pool is created using a pseudo-random number generator to guarantee high randomness. This approach helps in invalidating the intelligence gathered by the adversaries through the changes in the network configuration that will disturb attack execution, eventually leading to attack failure. Transparency is attained via preserving the actual IP intact and mapping a virtual IP to it. The proposed solution is implemented using the RYU Controller and Mininet. The efficient results obtained from the experiments substantiate the effectiveness of the MTD approach for enhancing endpoint security.

show abstract