We use cookies to improve your experience with our site.

一项关于移动目标防卫策略的综述:从结构体系视角

A Survey on the Moving Target Defense Strategies: An Architectural Perspective

  • 摘要: 随着网络的复杂性和规模不断增加哦,网络运行的安全防卫管理已成为网络管理者所面临的挑战,并且很多网络设备不能及时升级,容易遭受潜在攻击。此外,现存的网络基础设备的静态特征给攻击者足够时间研究网络的静态配置,并且适时发起精准的攻击,此时安全卫士不得不忙于防卫网络安全。这种不对称,就时间的资金投入而言,已经让攻击者受益高于安全卫士,并且让安全防卫更具有挑战性。这急待新的创新方法解决。移动目标防卫(MTD)属于创新方法之一,落实了网络系统的多样化动态配置,复杂化攻击者可见的具体的攻击表面。因此,MTD策略系统状况不能被攻击者预测,难以被利用,并且应对不同形式的攻击更加灵活。现今,有很多现存的关于不同MTD技术的文献综述,但是,据我们所知,对于结构体系视角的MTD策略或一些新技术,如,物联网(IoT),的关注仍然不足。本文呈现了全网系统结构视角的MTD策略及其运用策略的综合性综述,涵盖了MTD动机,主要MTD概念解释,正在进行的在网络系统每个层面的MTD及其应用的研究工作,提供未来研究机遇的新技术,如,软件定义网络(SDN)和物联网(IoT)。

     

    Abstract: As the complexity and the scale of networks continue to grow, the management of the network operations and security defense has become a challenging task for network administrators, and many network devices may not be updated timely, leaving the network vulnerable to potential attacks. Moreover, the static nature of our existing network infrastructure allows attackers to have enough time to study the static configurations of the network and to launch well-crafted attacks at their convenience while defenders have to work around the clock to defend the network. This asymmetry, in terms of time and money invested, has given attackers greater advantage than defenders and has made the security defense even more challenging. It calls for new and innovative ideas to fix the problem. Moving Target Defense (MTD) is one of the innovative ideas which implements diverse and dynamic configurations of network systems with the goal of puzzling the exact attack surfaces available to attackers. As a result, the system status with the MTD strategy is unpredictable to attackers, hard to exploit, and is more resilient to various forms of attacks. There are existing survey papers on various MTD techniques, but to the best of our knowledge, insufficient focus was given on the architectural perspective of MTD strategies or some new technologies such as Internet of Things (IoT). This paper presents a comprehensive survey on MTD and implementation strategies from the perspective of the architecture of the complete network system, covering the motivation for MTD, the explanation of main MTD concepts, ongoing research efforts of MTD and its implementation at each level of the network system, and the future research opportunities offered by new technologies such as Software-Defined Networking (SDN) and Internet of Things (IoT).

     

/

返回文章
返回