PROJECT TITLE :

Assessing the Effectiveness of Moving Target Defenses Using Security Models

ABSTRACT:

Cyber crime could be a developing concern, where criminals are targeting valuable assets and critical infrastructures among networked systems, causing a severe socio-economic impact on enterprises and individuals. Adopting moving target defense (MTD) helps thwart cyber attacks by continuously changing the attack surface. There are various MTD techniques proposed in various domains (e.g., virtualized network, wireless sensor network), however there's still a scarcity of strategies to assess and compare the effectiveness of them. Security models, like an attack graph (AG), provide a formal technique of analyzing the safety, however incorporating MTD techniques in those security models has not been studied. During this paper, we tend to incorporate MTD techniques into a security model, particularly a hierarchical attack representation model (HURT), to assess the effectiveness of them. Furthermore, we have a tendency to use importance measures (IMs) for deploying MTD techniques to reinforce the scalability. Finally, we have a tendency to compare the scalability of AG and DAMAGE when deploying MTD techniques, with changes in performance and security in our experiments.