Paper Info
Title
Dynamic security metrics for measuring the effectiveness of moving target defense techniques.
Abstract
Moving Target Defense (MTD) utilizes granularity, flexibility and elasticity properties of emerging networking technologies in order to continuously change the attack surface. There are many different MTD techniques proposed in the past decade to thwart cyberattacks. Due to the diverse range of different MTD techniques, it is of paramount importance to assess and compare their effectiveness. However, each technique causes distinct (dynamic) changes in the network, making an objective comparison difficult. In this paper, we incorporate MTD techniques into a temporal graph-based graphical security model, and develop a new set of dynamic security metrics to assess and compare their effectiveness. To this end, we first categorize and compare different attack and defense efforts. Second, we describe the temporal graph-based graphical security model to capture dynamic changes made by various MTD techniques in the network. We then develop a new set of security metrics for attack and defense efforts to evaluate the effectiveness of the MTD techniques. We implement two different MTD techniques, namely network topology shuffle and software diversity, and show their effectiveness against a targeted attack scenario in our experimental analysis. The results demonstrate that the proposed dynamic security metrics can capture different properties of MTD techniques, permitting a more fine-grained comparison and offering guidance for selecting the most effective MTD technique.
Year
DOI
Venue
2018
10.1016/j.cose.2018.08.003
Computers & Security
Keywords
Field
DocType
Emerging networking technology,Moving target defense,Security analysis,Security metric,Security model
Graph,Attack surface,Computer security,Computer science,Network topology,Granularity,Moving target defense,Computer security model,Distributed computing,Software diversity
Journal
Volume
ISSN
Citations 
79
0167-4048
0
PageRank 
References 
Authors
0.34
33
6
Name
Order
Citations
PageRank
Jin B. Hong112017.50
Simon Enoch Yusuf2104.59
Dong Seong Kim386693.34
Armstrong Nhlabatsi4255.65
Noora Fetais532.76
Khaled M. Khan629529.63