Manzoor, Salman and Gouglidis, Antonios and Bradbury, Matthew and Suri, Neeraj (2022) Poster: Effectiveness of Moving Target Defense Techniques to Disrupt Attacks in the Cloud. In: CCS '22: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security :. Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security . ACM, USA, pp. 3415-3417. ISBN 9781450394505
ACM_CCS_MTD_Poster_1_.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.
Download (533kB)
Abstract
Moving Target Defense (MTD) can eliminate the asymmetric advantage that attackers have in terms of time to explore a static system by changing a system's configuration dynamically to reduce the efficacy of reconnaissance and increase uncertainty and complexity for attackers. To this extent, a variety of MTDs have been proposed for specific aspects of a system. However, deploying MTDs at different layers/components of the Cloud and assessing their effects on the overall security gains for the entire system is still challenging since the Cloud is a complex system entailing physical and virtual resources, and there exists a multitude of attack surfaces that an attacker can target. Thus, we explore the combination of MTDs, and their deployment at different components (belonging to various operational layers) to maximize the security gains offered by the MTDs.We also propose a quantification mechanism to evaluate the effectiveness of the MTDs against the attacks in the Cloud.