Abstract:Driven by the rapid development of the Internet of Things, cloud computing and other emerging technologies, the connotation of cyber space is constantly expanding and becoming the fifth dimension of human activities. However, security problems in cyber space are becoming serious, and traditional defense measures (e.g., firewall, intrusion detection systems and security audit) often fall into a passive situation of being prone to attacks and difficult to take effect when responding to new types of network attacks with higher and higher degree of coordination and intelligence. By constructing and implementing the diverse strategy of dynamic transformation, the configuration characteristics of systems are constantly changing and the probability of vulnerability exposure is increasing. Therefore, the difficulty and cost of attack are increasing, which provides new ideas for reversing the asymmetric situation of defense and attack in cyber space. Nonetheless, there are few related works that systematically introduce dynamic defense mechanisms for cyber security. The related concepts and development strategies of dynamic defense are rarely analyzed and summarized. To bridge this gap, we conduct a comprehensive and concrete survey of recent research efforts on dynamic defense in cyber security. Specifically, we firstly introduce basic concepts and define dynamic defense in cyber security. Next, we review the architectures, enabling techniques and methods for moving target defense and mimic defense. This is followed with taxonomically summarizing the implementation and evaluation of dynamic defense. Finally, we discuss some open challenges and opportunities on dynamic defense in cyber security.

A Cyberspace Attack and Defense Model with Security Performance Analysis Based on Automata Theory

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

State Machine Based Malicious Packet Attack Detection and Security Situation Assessment

Optimal Strategy for Cyberspace Mimic Defense Based on Game Theory

Research on Cyberspace Modeling Framework for Intelligent Defense

Dynamic defenses in cyber security: Techniques, methods and challenges

An Input-Aware Mimic Defense Theory and its Practice

Cyberspace Security Evaluation Technology on the Condition of Attack and Defense Confrontation

Anti-Attacking Modeling and Analysis of Cyberspace Mimic DNS

Performance Modeling Based on GSPN and Markov for Cyberspace Mimic Defense System

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net

A Fuzzy Cyber-Risk Analysis Model for Assessing Attacks on the Availability and Integrity of the Military Command and Control Systems

Markov Decision Process For Automatic Cyber Defense

A Framework for Mimic Defense System in Cyberspace

Mimic Defense Technology

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

Scheduling Sequence Control Method Based on Sliding Window in Cyberspace Mimic Defense

A Stochastic Model of Active Cyber Defense Dynamics

A Novel Framework for Zero-Day Attacks Detection and Response with Cyberspace Mimic Defense Architecture