Scalable security models for assessing effectiveness of moving target defenses

Jin B. Hong; Dong Seong Kim

doi:10.1109/DSN.2014.54

Scalable security models for assessing effectiveness of moving target defenses

Jin B. Hong, Dong Seong Kim

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

19 Citations (Scopus)

Abstract

Moving Target Defense (MTD) changes the attack surface of a system that confuses intruders to thwart attacks. Various MTD techniques are developed to enhance the security of a networked system, but the effectiveness of these techniques is not well assessed. Security models (e.g., Attack Graphs (AGs)) provide formal methods of assessing security, but modeling the MTD techniques in security models has not been studied. In this paper, we incorporate the MTD techniques in security modeling and analysis using a scalable security model, namely Hierarchical Attack Representation Models (HARMs), to assess the effectiveness of the MTD techniques. In addition, we use importance measures (IMs) for scalable security analysis and deploying the MTD techniques in an effective manner. The performance comparison between the HARM and the AG is given. Also, we compare the performance of using the IMs and the exhaustive search method in simulations.

Original language	English
Title of host publication	Proceedings of the International Conference on Dependable Systems and Networks
Place of Publication	United States
Publisher	IEEE, Institute of Electrical and Electronics Engineers
Pages	515-526
Number of pages	12
ISBN (Electronic)	9781479922338
DOIs	https://doi.org/10.1109/DSN.2014.54
Publication status	Published - 18 Sept 2014
Externally published	Yes
Event	44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014 - Atlanta, United States Duration: 23 Jun 2014 → 26 Jun 2014

Conference

Conference	44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014
Country/Territory	United States
City	Atlanta
Period	23/06/14 → 26/06/14

Access to Document

10.1109/DSN.2014.54

Cite this

@inproceedings{ca9f5da3d3824b87954fb96290c00c64,

title = "Scalable security models for assessing effectiveness of moving target defenses",

abstract = "Moving Target Defense (MTD) changes the attack surface of a system that confuses intruders to thwart attacks. Various MTD techniques are developed to enhance the security of a networked system, but the effectiveness of these techniques is not well assessed. Security models (e.g., Attack Graphs (AGs)) provide formal methods of assessing security, but modeling the MTD techniques in security models has not been studied. In this paper, we incorporate the MTD techniques in security modeling and analysis using a scalable security model, namely Hierarchical Attack Representation Models (HARMs), to assess the effectiveness of the MTD techniques. In addition, we use importance measures (IMs) for scalable security analysis and deploying the MTD techniques in an effective manner. The performance comparison between the HARM and the AG is given. Also, we compare the performance of using the IMs and the exhaustive search method in simulations.",

keywords = "Attack Representation Model, Importance Measures, Moving Target Defense, Security Analysis, Security Modeling Techniques",

author = "Hong, {Jin B.} and Kim, {Dong Seong}",

year = "2014",

month = sep,

day = "18",

doi = "10.1109/DSN.2014.54",

language = "English",

pages = "515--526",

booktitle = "Proceedings of the International Conference on Dependable Systems and Networks",

publisher = "IEEE, Institute of Electrical and Electronics Engineers",

address = "United States",

note = "44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014 ; Conference date: 23-06-2014 Through 26-06-2014",

}

Hong, JB & Kim, DS 2014, Scalable security models for assessing effectiveness of moving target defenses. in Proceedings of the International Conference on Dependable Systems and Networks., 6903607, IEEE, Institute of Electrical and Electronics Engineers, United States, pp. 515-526, 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014, Atlanta, United States, 23/06/14. https://doi.org/10.1109/DSN.2014.54

Scalable security models for assessing effectiveness of moving target defenses. / Hong, Jin B.; Kim, Dong Seong.
Proceedings of the International Conference on Dependable Systems and Networks. United States: IEEE, Institute of Electrical and Electronics Engineers, 2014. p. 515-526 6903607.

Research output: Chapter in Book/Conference paper › Conference paper › peer-review

TY - GEN

T1 - Scalable security models for assessing effectiveness of moving target defenses

AU - Hong, Jin B.

AU - Kim, Dong Seong

PY - 2014/9/18

Y1 - 2014/9/18

N2 - Moving Target Defense (MTD) changes the attack surface of a system that confuses intruders to thwart attacks. Various MTD techniques are developed to enhance the security of a networked system, but the effectiveness of these techniques is not well assessed. Security models (e.g., Attack Graphs (AGs)) provide formal methods of assessing security, but modeling the MTD techniques in security models has not been studied. In this paper, we incorporate the MTD techniques in security modeling and analysis using a scalable security model, namely Hierarchical Attack Representation Models (HARMs), to assess the effectiveness of the MTD techniques. In addition, we use importance measures (IMs) for scalable security analysis and deploying the MTD techniques in an effective manner. The performance comparison between the HARM and the AG is given. Also, we compare the performance of using the IMs and the exhaustive search method in simulations.

AB - Moving Target Defense (MTD) changes the attack surface of a system that confuses intruders to thwart attacks. Various MTD techniques are developed to enhance the security of a networked system, but the effectiveness of these techniques is not well assessed. Security models (e.g., Attack Graphs (AGs)) provide formal methods of assessing security, but modeling the MTD techniques in security models has not been studied. In this paper, we incorporate the MTD techniques in security modeling and analysis using a scalable security model, namely Hierarchical Attack Representation Models (HARMs), to assess the effectiveness of the MTD techniques. In addition, we use importance measures (IMs) for scalable security analysis and deploying the MTD techniques in an effective manner. The performance comparison between the HARM and the AG is given. Also, we compare the performance of using the IMs and the exhaustive search method in simulations.

KW - Attack Representation Model

KW - Importance Measures

KW - Moving Target Defense

KW - Security Analysis

KW - Security Modeling Techniques

UR - http://www.scopus.com/inward/record.url?scp=84912058027&partnerID=8YFLogxK

U2 - 10.1109/DSN.2014.54

DO - 10.1109/DSN.2014.54

M3 - Conference paper

AN - SCOPUS:84912058027

SP - 515

EP - 526

BT - Proceedings of the International Conference on Dependable Systems and Networks

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - United States

T2 - 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014

Y2 - 23 June 2014 through 26 June 2014

ER -

Scalable security models for assessing effectiveness of moving target defenses

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this