Abstract:Driven by the rapid development of the Internet of Things, cloud computing and other emerging technologies, the connotation of cyber space is constantly expanding and becoming the fifth dimension of human activities. However, security problems in cyber space are becoming serious, and traditional defense measures (e.g., firewall, intrusion detection systems and security audit) often fall into a passive situation of being prone to attacks and difficult to take effect when responding to new types of network attacks with higher and higher degree of coordination and intelligence. By constructing and implementing the diverse strategy of dynamic transformation, the configuration characteristics of systems are constantly changing and the probability of vulnerability exposure is increasing. Therefore, the difficulty and cost of attack are increasing, which provides new ideas for reversing the asymmetric situation of defense and attack in cyber space. Nonetheless, there are few related works that systematically introduce dynamic defense mechanisms for cyber security. The related concepts and development strategies of dynamic defense are rarely analyzed and summarized. To bridge this gap, we conduct a comprehensive and concrete survey of recent research efforts on dynamic defense in cyber security. Specifically, we firstly introduce basic concepts and define dynamic defense in cyber security. Next, we review the architectures, enabling techniques and methods for moving target defense and mimic defense. This is followed with taxonomically summarizing the implementation and evaluation of dynamic defense. Finally, we discuss some open challenges and opportunities on dynamic defense in cyber security.

The Border Attack Defense System is Software-Based

Proactive Security Defense of Dynamic Network

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Evolving Defense Mechanism for Future Network Security

Computer Network Attack and Defense Technology

Research and Implementation of Network Security Cooperative Defense System

Design and Implementation of Enterprise Network Security System Based on Firewall

Reverse Analysis and Vulnerability Detection for Network System Software

Research on the Main Threat and Prevention Technology of Computer Network Security

Analysis of Influencing Factors and Countermeasures of Computer Network Security

Design of Computer Network Security Defense System Based on Big Data

Software and Cyber Security-A Survey

Design and implementation of computer network security detection and control system

Design for Dual Network Defense System

Dynamic defenses in cyber security: Techniques, methods and challenges

Application Analysis of Security Technology in Computer Software Development

Exploring Computer Information Security Technology and Protection Methods

Research on Software-Defined Network and the Security Defense Technology

Design of a cybersecurity defense system based on big data and artificial intelligence

Computer Network Security System Research

Computer Network Information Security Monitoring System Based on Big Data Era