Moving target defense for cloud infrastructures: Lessons from botnets

W Peng, F Li, X Zou - High Performance Cloud Auditing and Applications, 2013 - Springer
High Performance Cloud Auditing and Applications, 2013Springer
While providing elasticity to clients through on-demand service and cost-effectiveness to
service providers through efficient resource allocation, current cloud infrastructures are
largely homogeneously and statically configured for ease of administration. This leaves
ample opportunities for attackers to reconnoiter and penetrate the security perimeter of cloud
services. This chapter (1) explores the evolution in botnet technologies from the early static
architectures to the recent dynamic and resilient architectures that employ various moving …
Abstract
While providing elasticity to clients through on-demand service and cost-effectiveness to service providers through efficient resource allocation, current cloud infrastructures are largely homogeneously and statically configured for ease of administration. This leaves ample opportunities for attackers to reconnoiter and penetrate the security perimeter of cloud services. This chapter (1) explores the evolution in botnet technologies from the early static architectures to the recent dynamic and resilient architectures that employ various moving target defense (MTD) techniques to circumvent crackdowns, and (2) draws lessons from botnets in identifying cloud security challenges and proposed solutions to MTD for cloud infrastructures, in which the cloud infrastructure configuration constantly evolves to confuse attackers without significantly degrading the quality of service. Proposed solutions may increase the cost for potential attackers by complicating the attack process and limiting the exposure of network vulnerability in order to make the network more resilient against novel and persistent attacks.
Springer
以上显示的是最相近的搜索结果。 查看全部搜索结果

Google学术搜索按钮

example.edu/paper.pdf
搜索
获取 PDF 文件
引用
References