The book puts forward dynamically enabled cyber defense technology as a solution to the system homogenization problem. Based on the hierarchy of the protected information system entity, the book elaborates on current mainstream dynamic defense technologies from four aspects: the internal hardware platform, software service, information data and external network communication. It also ascertains their possible evolution routes, clarifies their relationship with existing security products, and makes macro analyses and discussions on security gain and overall system efficiency of these technologies.This book can be used as both a textbook for graduate courses related to electronic information as well as a reference for scientific researchers engaged in relevant research. It helps graduate students majoring in electronics and information sciences to gain an understanding in dynamically-enabled cyber defense. Scientists and engineers specialising in network security research should also find this book to be a useful guide on recent developments in network security.
Contents:
-
Introduction:
- Development and Crisis of Information Age
- Omnipotent Cyber Attacks
- Unavoidable Security Vulnerabilities
- Dynamically Enabled of Pre-Enemy Changes
-
Overview of Dynamically Enabled Defense:
- Overview of Dynamically Enabled Cyber Defense
- Dynamically Enabled Defense Technology
- Dynamic Enablement and Cyber Kill Chain
- Dynamic Enablement and Dynamic Attack Surfaces
- Summary
-
Dynamic Software Defense:
- Introduction
- Address Space Layout Randomization
- Instruction Set Randomization
- In-Place Code Randomization
- Software Polymorphism
- Multi-Variant Execution
- Summary
-
Dynamic Network Defense:
- Introduction
- Dynamic Network Address Translation Technology
- Randomized Allocation of Network Address Space Technology Based on DHCP
- Synchronization-Based End Information Hopping Protection Technology
- Overlay Network Protection Technology Against DDoS Attacks
- Summary
-
Dynamic Platform Defense:
- Introduction
- Platform Dynamization Based on Reconfigurable Computing
- Application Live Migration Based on Heterogeneous Platforms
- Dynamic Diversification of Web Services
- Platform Dynamization Based on Intrusion Tolerance
- Summary
-
Dynamic Data Defense:
- Essence of Dynamic Data Defense
- Data Randomization
- Data Diversification of N-Variant
- N-Copy Data Diversification for Fault Tolerance
- Data Diversification for Web Application Security
- Summary
-
Dynamic Defense Effectiveness Evaluation Technology:
- Introduction
- Overall Evaluation of Defense Effectiveness of Dynamic Enablement Technology
- Defense Effectiveness Evaluation of Dynamic Enablement Technology Based on Vulnerability Analysis
- Effectiveness Evaluation of Moving Target Defense Based on Attack Surface Measurement
- Moving Target Defense and System Availability Evaluation
- Summary
Readership: Graduate students in electronic information related majors who are interested in dynamically-enabled cyber defense, scientists and engineers who are specialised in network security research.
Key Features:
- Deeply analyzes problems caused by system homogenization, and summarizes the basic status quo of dynamic defense technology
- Elaborates current mainstream dynamic defense technologies from four aspects: its internal hardware platform, software service, information data and external network communication, it also ascertains their possible evolution routes, clarifies their relationship with existing security products, and makes macro analysis and discussions on security gain and overall system efficiency of these technologies
