An Evaluation Framework for Moving Target Defense Based on Analytic Hierarchy Process

Huang, Chu and Zhu, Sencun and Yang, Yi (2018) An Evaluation Framework for Moving Target Defense Based on Analytic Hierarchy Process. EAI Endorsed Transactions on Security and Safety, 4 (13). e4. ISSN 2032-9393

[img]
Preview
Text
eai.4-1-2018.153527.pdf
Available under License Creative Commons Attribution No Derivatives.

Download (1MB) | Preview

Abstract

A Moving Target Defense (MTD)-enabled system is one which can dynamically and rapidly change its properties and code such that the attackers do not have sufficient time to exploit it. Although a variety of MTD systems have been proposed, few work has focused on assessing the relative cost-effectiveness of different MTD approaches. In this paper, based on a generic MTD theory, we propose five general evaluation metrics and an assessment framework on top of Analytic Hierarchy Process (AHP), which aggregates these five metrics and systematically evaluates/compares security strengths and costs of multiple MTD-based approaches in the same category. This framework could be widely used in different MTD categories under various attacks and it will enable a security specialist to choose the best MTD approach from a set of possible alternatives based on his/her goal and understanding of the problem. A detailed case study on a specific MTD category called software diversification validates the effectiveness of this framework. Our evaluation results rank three software diversity algorithms and choose the best one among three based on problem setting and situation constraints.

Item Type: Article
Uncontrolled Keywords: Moving Target Defense, Analytic Hierarchy Process, Evaluation and Comparison
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor IV
Date Deposited: 26 Mar 2021 13:52
Last Modified: 26 Mar 2021 13:52
URI: https://eprints.eudl.eu/id/eprint/2080

Actions (login required)

View Item View Item