• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>2018 IEEE Intl Conf on Parallel amp; Distributed Processing with Applications, Ubiquitous Computing amp; Communications, Big Data amp; Cloud Computing, Social Computing amp; Networking, Sustainable Computing amp; Communications >A Cyber Risk Based Moving Target Defense Mechanism for Microservice Architectures
【24h】

A Cyber Risk Based Moving Target Defense Mechanism for Microservice Architectures

机译：微服务架构中基于网络风险的移动目标防御机制

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Microservice Architectures (MSA) structure applications as a collection of loosely coupled services that implement business capabilities. The key advantages of MSA include inherent support for continuous deployment of large complex applications, agility and enhanced productivity. However, studies indicate that most MSA are homogeneous, and introduce shared vulnerabilites, thus vulnerable to multi-step attacks, which are economics-of-scale incentives to attackers. In this paper, we address the issue of shared vulnerabilities in microservices with a novel solution based on the concept of Moving Target Defenses (MTD). Our mechanism works by performing risk analysis against microservices to detect and prioritize vulnerabilities. Thereafter, security risk-oriented software diversification is employed, guided by a defined diversification index. The diversification is performed at runtime, leveraging both model and template based automatic code generation techniques to automatically transform programming languages and container images of the microservices. Consequently, the microservices attack surfaces are altered thereby introducing uncertainty for attackers while reducing the attackability of the microservices. Our experiments demonstrate the efficiency of our solution, with an average success rate of over 70% attack surface randomization.
机译：微服务架构（MSA）将应用程序结构化为实现业务功能的松散耦合服务的集合。 MSA的主要优势包括对大型复杂应用程序的连续部署的内在支持，敏捷性和提高的生产率。但是，研究表明，大多数MSA是同质的，并且会引入共享的脆弱性，因此容易受到多步攻击，这是从规模上诱使攻击者的动机。在本文中，我们使用基于移动目标防御（MTD）概念的新颖解决方案来解决微服务中的共享漏洞问题。我们的机制通过对微服务执行风险分析来检测和确定漏洞的优先级来工作。此后，在定义的多元化指数的指导下，采用了面向安全风险的软件多元化。多样化是在运行时执行的，它利用基于模型和模板的自动代码生成技术来自动转换微服务的编程语言和容器映像。因此，改变了微服务的攻击面，从而为攻击者带来了不确定性，同时降低了微服务的可攻击性。我们的实验证明了我们解决方案的效率，攻击面随机分配的平均成功率超过70％。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号