Survey on Attack Surface Dynamic Transfer Technology Based on Moving Target Defense
Author:
Affiliation:

Clc Number:

Fund Project:

National Natural Science Foundation of China (61602114); National Key Research and Development Program (2017YFB0801703)

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    As a dynamic and active defense technology, moving target defense can defeat the attacker's attack by constantly shifting the attack surface and reducing the static, isomorphic and deterministic nature of the system. With the continuous development and changes of network attacks, in-depth study of moving target defense is of great significance to China's cyberspace security. As a key problem in moving target defense field, attack surface dynamic transfer technology has attracted wide attention of researchers. The dynamic transfer technology takes advantage of uncertainty, dynamicity and randomness, can realize dynamic defense of the information system and effectively overcome the certainty, static and isomorphism of traditional defense. In this paper, the basic concept of the attack surface is first laid out, and the formal definitions of the attack surface and attack surface transfer are explained. Then, the attack surface dynamic transfer technologies are introduced from four aspects, including data attack surface, software attack surface, network attack surface and platform attack face. Furthermore, different dynamic transfer techniques, are analyzed and compared, and their advantages and shortcomings are pointed out. Finally, the future possible research directions of attack surface dynamic transfer technology are discussed with emphasis on the multi-level attack surface dynamic transfer technology integration, comprehensive evaluation method of attack surface dynamic transfer, dynamic transfer method of attack surface based on perception and attack surface transfer decision-making based on the three-party game model.

    Reference
    Related
    Cited by
Get Citation

周余阳,程光,郭春生,戴冕.移动目标防御的攻击面动态转移技术研究综述.软件学报,2018,29(9):2799-2820

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:January 10,2018
  • Revised:April 30,2018
  • Adopted:
  • Online: June 08,2018
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063