Scheduling Sequence Control Method Based on Sliding Window in Cyberspace Mimic Defense
Open Access
- 23 December 2019
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Access
- Vol. 8, 1517-1533
Abstract
Cyberspace Mimic Defense (CMD) is a proactive defense theory proposed in recent years to deal with vulnerability and backdoor threats that are common in information systems. Different from moving target defense (MTD), CMD can obtain foundation by verifying multiple results from isolated, heterogeneous, and parallel running spaces, thus initiating a more targeted defensive action, such as scheduling and structure transformation. However, scheduling sequence control is a severe problem in this process, which needs to select a series of scheduling time and take into account security, efficiency, and robustness for variable attack situations. Inspired by the traffic and congestion control mechanism in computer networks, this paper proposed a sliding window-based scheduling sequence control method. By setting driver events to trigger the window “sliding,” the control parameters update and adapt to the current state accordingly. Then, considering internal resource constraints and external attack situations, a two-factor driver on variable period and exception threshold with their corresponding calculations are specified. Evaluations show that this method can maintain good performance under different scenarios, which proves to be an effective solution for scheduling sequence control in CMD.Keywords
Funding Information
- National Natural Science Foundation of China (61572520)
- National Natural Science Foundation of China (61521003)
This publication has 23 references indexed in Scilit:
- A Survey on Systems Security MetricsACM Computing Surveys, 2016
- Where to Kill the Cyber Kill-Chain: An Ontology-Driven Framework for IoT Security Analytics2016
- Dynamic‐scheduling mechanism of controllers based on security policy in software‐defined networkElectronics Letters, 2016
- Jump over ASLR: Attacking branch predictors to bypass ASLR2016
- Design of airborne electrical load management center with high reliability based on dissimilar redundant technique2015
- Assessing the Effectiveness of Moving Target Defenses Using Security ModelsIEEE Transactions on Dependable and Secure Computing, 2015
- Towards a Theory of Moving Target Defense2014
- No free lunch in cyber security2014
- Dynamic Security Risk Management Using Bayesian Attack GraphsIEEE Transactions on Dependable and Secure Computing, 2011
- Automated generation and analysis of attack graphs2005