Abstract:Driven by the rapid development of the Internet of Things, cloud computing and other emerging technologies, the connotation of cyber space is constantly expanding and becoming the fifth dimension of human activities. However, security problems in cyber space are becoming serious, and traditional defense measures (e.g., firewall, intrusion detection systems and security audit) often fall into a passive situation of being prone to attacks and difficult to take effect when responding to new types of network attacks with higher and higher degree of coordination and intelligence. By constructing and implementing the diverse strategy of dynamic transformation, the configuration characteristics of systems are constantly changing and the probability of vulnerability exposure is increasing. Therefore, the difficulty and cost of attack are increasing, which provides new ideas for reversing the asymmetric situation of defense and attack in cyber space. Nonetheless, there are few related works that systematically introduce dynamic defense mechanisms for cyber security. The related concepts and development strategies of dynamic defense are rarely analyzed and summarized. To bridge this gap, we conduct a comprehensive and concrete survey of recent research efforts on dynamic defense in cyber security. Specifically, we firstly introduce basic concepts and define dynamic defense in cyber security. Next, we review the architectures, enabling techniques and methods for moving target defense and mimic defense. This is followed with taxonomically summarizing the implementation and evaluation of dynamic defense. Finally, we discuss some open challenges and opportunities on dynamic defense in cyber security.

An Active Defense Model Based on Situational Awareness and Firewalls

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

A Reference Model And System Architecture For Database Firewall

An active defense model for Web Accessing DoS attacks

Active Defense System Model Based on Campus Network

An Active Cooperation Defense Model for Large Scale Network

Dynamic defenses in cyber security: Techniques, methods and challenges

Dual-structural network of active defense

The Study of Network Security Dynamic Defense Model

Dynamic Defense Security Model for Network Perimeter

Research and Implementation of Network Security Cooperative Defense System

Design of Active Firewall Based on Safety Psychology

Simulation and Analysis of DDoS in Active Defense Environment

Optimizing Active Cyber Defense

An Active Deception Defense Model Based on Address Mutation and Fingerprint Camouflage

Exploring the Optimum Proactive Defense Strategy for the Power Systems from an Attack Perspective.

A Model of APT Attack Defense Based on Cyber Threat Detection

NETWORK SYSTEM SELF-DEFENSE SYSTEM BASED ON NETWORK SECURITY SITUATION AWARENESS

TC Assurance Architecture for Cybersecurity Infrastructure Based on Active Defense

Dynamic Game Model of Botnet DDoS Attack and Defense

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks