• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International Conference on Malicious and Unwanted Software >An adversarial coupon-collector model of asynchronous moving-target defense against botnet reconnaissance*
【24h】

An adversarial coupon-collector model of asynchronous moving-target defense against botnet reconnaissance*

机译：僵尸网络侦察的异步移动目标防御的对抗性赠券-收集器模型 *

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

We consider a moving-target defense of a proxied multiserver tenant of the cloud where the proxies dynamically change to defeat reconnaissance activity by a botnet planning a DDoS attack targeting the tenant. Unlike the system of [4] where all proxies change simultaneously at a fixed rate, we consider a more “responsive” system where the proxies may change more rapidly and selectively based on the current session request intensity, which is expected to be abnormally large during active reconnaissance. In this paper, we study a tractable “adversarial” coupon-collector model wherein proxies change after a random period of time from the latest request, i.e., asynchronously. In addition to determining the stationary mean number of proxies discovered by the attacker, we study the age of a proxy (coupon type) when it has been identified (requested) by the botnet. This gives us the rate at which proxies change (cost to the defender) when the nominal client request load is relatively negligible.
机译：我们考虑了代理的云多服务器租户的移动目标防御，其中代理通过计划针对租户的DDoS攻击而动态更改以击败侦察活动。与[4]中所有代理以固定速率同时更改的系统不同，我们认为是一种更具“响应性”的系统，在该系统中，代理可以根据当前会话请求强度更快，更有选择地进行更改，预计在此期间强度会异常大主动侦察。在本文中，我们研究了一种易于处理的“对抗性”优惠券/收藏家模型，其中，代理从最近的请求开始经过一段随机的时间（即异步）后发生了变化。除了确定攻击者发现的代理的固定平均数量之外，我们还研究由僵尸网络识别（请求）的代理的年龄（优惠券类型）。当名义客户请求负载相对可忽略时，这为我们提供了代理更改的速率（防御者的成本）。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号