Title
Diversity-based detection of security anomalies
Abstract
Detecting and preventing attacks before they compromise a system can be done using acceptance testing, redundancy based mechanisms, and using external consistency checking such external monitoring and watchdog processes. Diversity-based adjudication, is a step towards an oracle that uses knowable behavior of a healthy system. That approach, under best circumstances, is able to detect even zero-day attacks. In this approach we use functionally equivalent but in some way diverse components and we compare their output vectors and reactions for a given input vector. This paper discusses practical relevance of this approach in the context of recent web-service attacks.
Year
DOI
Venue
2014
10.1145/2600176.2600205
HotSoS
Keywords
Field
DocType
attack detection,diversity,software architectures,redundancy in security,web services
Data mining,Computer science,Computer security,Oracle,Redundancy (engineering),Adjudication,Compromise,Acceptance testing,Web service
Conference
Citations 
PageRank 
References 
1
0.36
3
Authors
2
Name
Order
Citations
PageRank
Roopak Venkatakrishnan110.36
Mladen A. Vouk245249.92