Title
Towards attack-agnostic defenses
Abstract
Internet attackers control hundreds of thousands to perhaps millions of computers, which they can use for a variety of different attacks. Common attacks include spam delivery, phishing, and DDoS. The current research community focus is on defenses for each specific attack type compromised hosts may launch. However, attack-specific approaches almost always have two fundamental drawbacks: they do not address the root problem that attackers control an army of compromised hosts, and they do not provide the right incentives for users to properly secure their machines. As a result, attack-specific defenses may be defeated by new attacks, even those that may be only slightly different from old attacks. We argue researchers should also focus on attackagnostic defenses whose effectiveness does not depend on the particular attack type. We initiate this line of research by investigating the design space for attack-agnostic defenses, and then detailing two extreme points within the design space: an InternetWatch List and an Internet Reputation System.
Year
Venue
Keywords
2006
HotSec
common attack,internet reputation system,design space,attack-specific approach,different attack,current research community focus,attackagnostic defenses,attack-agnostic defenses,internet attackers control hundred,towards attack-agnostic defenses,attack-specific defenses
Field
DocType
Citations 
Design space,Internet privacy,Reputation system,Phishing,Incentive,Denial-of-service attack,Computer science,Computer security,The Internet
Conference
1
PageRank 
References 
Authors
0.48
8
2
Name
Order
Citations
PageRank
David Brumley12940142.75
Dawn Song27334385.37