Abstract | ||
---|---|---|
Detecting and preventing attacks before they compromise a system can be done using acceptance testing, redundancy based mechanisms, and using external consistency checking such external monitoring and watchdog processes. Diversity-based adjudication, is a step towards an oracle that uses knowable behavior of a healthy system. That approach, under best circumstances, is able to detect even zero-day attacks. In this approach we use functionally equivalent but in some way diverse components and we compare their output vectors and reactions for a given input vector. This paper discusses practical relevance of this approach in the context of recent web-service attacks. |
Year | DOI | Venue |
---|---|---|
2014 | 10.1145/2600176.2600205 | HotSoS |
Keywords | Field | DocType |
attack detection,diversity,software architectures,redundancy in security,web services | Data mining,Computer science,Computer security,Oracle,Redundancy (engineering),Adjudication,Compromise,Acceptance testing,Web service | Conference |
Citations | PageRank | References |
1 | 0.36 | 3 |
Authors | ||
2 |
Name | Order | Citations | PageRank |
---|---|---|---|
Roopak Venkatakrishnan | 1 | 1 | 0.36 |
Mladen A. Vouk | 2 | 452 | 49.92 |