Abstract:Driven by the rapid development of the Internet of Things, cloud computing and other emerging technologies, the connotation of cyber space is constantly expanding and becoming the fifth dimension of human activities. However, security problems in cyber space are becoming serious, and traditional defense measures (e.g., firewall, intrusion detection systems and security audit) often fall into a passive situation of being prone to attacks and difficult to take effect when responding to new types of network attacks with higher and higher degree of coordination and intelligence. By constructing and implementing the diverse strategy of dynamic transformation, the configuration characteristics of systems are constantly changing and the probability of vulnerability exposure is increasing. Therefore, the difficulty and cost of attack are increasing, which provides new ideas for reversing the asymmetric situation of defense and attack in cyber space. Nonetheless, there are few related works that systematically introduce dynamic defense mechanisms for cyber security. The related concepts and development strategies of dynamic defense are rarely analyzed and summarized. To bridge this gap, we conduct a comprehensive and concrete survey of recent research efforts on dynamic defense in cyber security. Specifically, we firstly introduce basic concepts and define dynamic defense in cyber security. Next, we review the architectures, enabling techniques and methods for moving target defense and mimic defense. This is followed with taxonomically summarizing the implementation and evaluation of dynamic defense. Finally, we discuss some open challenges and opportunities on dynamic defense in cyber security.

Proactive Security Defense of Dynamic Network

Evolving Defense Mechanism for Future Network Security

The Study of Network Security Dynamic Defense Model

Dynamic Defense Security Model for Network Perimeter

A Self-transforming Proactive Defense Network Framework based on“carrier”

Research and Implementation of Network Security Cooperative Defense System

Dynamic defenses in cyber security: Techniques, methods and challenges

Dynamic Honey and Control Technique in Network Cooperative Security

Reverse Analysis and Vulnerability Detection for Network System Software

Dynamic Defense Methods For Endogenously Secure Industrial Control Networks

Dynamic-Enabled Defense Strategy Base On Improved Cvss For The Home Internet

Dynamically enabled defense effectiveness evaluation of a home Internet based on vulnerability analysis and attack layer measurement

Defense Strategy of Network Security based on Dynamic Classification.

Game Theory Based Dynamic Defense Mechanism for SDN.

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Network Distributed Dynamic Defence Architecture Based on Agents

A Distributed Dynamic Self-Immunity Security Architecture

Application Layer Real-time Proactive Defense System Based on Application Layer Protocol Analysis

Policy-Tree Based Proactive Defense Model For Network Security

Security Analysis of Dynamic SDN Architectures Based on Game Theory

Dual-structural network of active defense