Abstract:In recent years, network attacks have been characterized by diversification and scale, which indicates a requirement for defense strategies to sacrifice generalizability for higher security. As the latest theoretical achievement in active defense, mimic defense demonstrates high robustness against complex attacks. This study proposes a Function-aware, Bayesian adjudication, and Adaptive updating Mimic Defense (FBAMD) theory for addressing the current problems of existing work including limited ability to resist unknown threats, imprecise heterogeneous metrics, and over-reliance on relatively-correct axiom. FBAMD incorporates three critical steps. Firstly, the common features of executors' vulnerabilities are obtained from the perspective of the functional implementation (i.e, input-output relationships extraction). Secondly, a new adjudication mechanism considering Bayes' theory is proposed by leveraging the advantages of both current results and historical confidence. Furthermore, posterior confidence can be updated regularly with prior adjudication information, which provides mimic system adaptability. The experimental analysis shows that FBAMD exhibits the best performance in the face of different types of attacks compared to the state-of-the-art over real-world datasets. This study presents a promising step toward the theoretical innovation of mimic defense.

The Architecture of Distributed Storage System under Mimic Defense Theory.

On Distributed Object Storage Architecture Based on Mimic Defense

MDFS: A Mimic Defense Theory Based Architecture for Distributed File System

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Research on Cyber Mimic Defense

Survivability Mechanisms for Storage System

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

Research on Cyberspace Mimic Defense Based on Dynamic Heterogeneous Redundancy Mechanism

Securing Nuclear Power ICS with Mimic Defense Object Storage System

Scientific Workflow Execution System Based on Mimic Defense in the Cloud Environment.

Design and Implementation of Mimic Defense Web Server

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

A Framework for Mimic Defense System in Cyberspace

A function-aware mimic defense theory and its practice

A Novel Secure Distributed Disk System

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

Research and Design of MDS in Distributed Storage System

Optimizing File Transfer in Distributed Storage System Based on Reconfiguration of Storage Structure

An Input-Aware Mimic Defense Theory and its Practice

Distributed Storage Cluster Design for Remote Mirroring Based on Storage Area Network.

Design And Performance Analysis Of Distributed Fault Tolerant Storage Systems