Operational cost of deploying Moving Target Defenses defensive work factors

Leeuwen, Brian Van; Stout, William M.S.; Urias, Vincent

doi:10.1109/milcom.2015.7357570

Cited by 22 publications

(5 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The result shows that different mechanisms in different layer can resist different phase in cyber kill-chain. What is more, in order to measure the operational cost of MTD implementation, literature [109] designed application performance monitoring (APM) and network performance monitoring (NPM). By adopting APM and NPM, the operational costs of MTD are mainly analyzed from the aspects of operating expenses, the use rate of network or endpoint node resource, and the overhead change with the change in network size.…”

Section: Research Of Effectiveness Evaluation Methods Mtd Performancementioning

confidence: 99%

Moving Target Defense Techniques: A Survey

Cheng

Zhang

Jian-cheng

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

As an active defense technique to change asymmetry in cyberattack-defense confrontation, moving target defense research has become one of the hot spots. In order to gain better understanding of moving target defense, background knowledge and inspiration are expounded at first. Based on it, the concept of moving target defense is analyzed. Secondly, literature analysis method is adopted to explain the design principles and system architecture of moving target defense. In addition, some relevant key techniques are introduced from the aspects of strategy generation, shuffling implementation, and performance evaluation. After that, the applications of moving target defense in different network architectures are illustrated. Finally, existing problems and future trend in this field are elaborated so as to provide a basis for further study.

show abstract

Section: Research Of Effectiveness Evaluation Methods Mtd Performancementioning

confidence: 99%

Moving Target Defense Techniques: A Survey

Cheng

Zhang

Jian-cheng

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…To assess the efficacy of our network randomization approaches, we leveraged research done by Van Leeuwen, et al [15] regarding the development of defensive work factors for MTDs. The experimental setup consisted of a highlyinstrumented testbed using virtual machines running the three different randomization techniques.…”

Section: Experiments Set Up and Resultsmentioning

confidence: 99%

Techniques for the dynamic randomization of network attributes

Chavez

Stout

Peisert

2015

2015 International Carnahan Conference on Security Technology (ICCST)

Self Cite

View full text Add to dashboard Cite

Abstract-Critical infrastructure control systems continue to foster predictable communication paths and static configurations that allow easy access to our networked critical infrastructure around the world. This makes them attractive and easy targets for cyber-attack. We have developed technologies that address these attack vectors by automatically reconfiguring network settings. Applying these protective measures will convert control systems into "moving targets" that proactively defend themselves against attack. This "Moving Target Defense" (MTD) revolves about the movement of network reconfiguration, securely communicating reconfiguration specifications to other network nodes as required, and ensuring that connectivity between nodes is uninterrupted. Software-defined Networking (SDN) is leveraged to meet many of these goals. Our MTD approach eliminates adversaries targeting known static attributes of network devices and systems, and consists of the following three techniques: (1) Network Randomization for TCP/UDP Ports; (2) Network Randomization for IP Addresses; (3) Network Randomization for Network PathsIn this paper, we describe the implementation of the aforementioned technologies. We also discuss the individual and collective successes for the techniques, challenges for deployment, constraints and assumptions, and the performance implications for each technique.

show abstract

“…However, it might be challenging to find the optimal balance of security and performance when relying on a single countermeasure. Moreover, since vIPs are assigned to each service, multiple vIPs are assigned to servers running multiple services, which will make it difficult to monitor for the already deployed mechanisms [13].…”

Section: Related Workmentioning

confidence: 99%

An SDN-Based Moving Target Defense as a Countermeasure to Prevent Network Scans

Chiba

Guillen

Izumi

et al. 2022

IEICE Trans. Commun.

View full text Add to dashboard Cite

This paper proposes a Software-Defined Network (SDN)based Moving Target Defense (MTD) to protect the network from potential scans in a compromised network. As a unique feature, contrary to traditional MTDs, the proposed MTD can work alongside other tools and countermeasures already deployed in the network (e.g., Intrusion Protection and Detection Systems) without affecting its behavior. Through extensive evaluation, we showed the effectiveness of the proposed mechanism compared to existing solutions in preventing scans of different rates without affecting the network and controller performance.

show abstract

Operational cost of deploying Moving Target Defenses defensive work factors

Cited by 22 publications

References 4 publications

Moving Target Defense Techniques: A Survey

Moving Target Defense Techniques: A Survey

Techniques for the dynamic randomization of network attributes

An SDN-Based Moving Target Defense as a Countermeasure to Prevent Network Scans

Contact Info

Product

Resources

About