Abstract:Driven by the rapid development of the Internet of Things, cloud computing and other emerging technologies, the connotation of cyber space is constantly expanding and becoming the fifth dimension of human activities. However, security problems in cyber space are becoming serious, and traditional defense measures (e.g., firewall, intrusion detection systems and security audit) often fall into a passive situation of being prone to attacks and difficult to take effect when responding to new types of network attacks with higher and higher degree of coordination and intelligence. By constructing and implementing the diverse strategy of dynamic transformation, the configuration characteristics of systems are constantly changing and the probability of vulnerability exposure is increasing. Therefore, the difficulty and cost of attack are increasing, which provides new ideas for reversing the asymmetric situation of defense and attack in cyber space. Nonetheless, there are few related works that systematically introduce dynamic defense mechanisms for cyber security. The related concepts and development strategies of dynamic defense are rarely analyzed and summarized. To bridge this gap, we conduct a comprehensive and concrete survey of recent research efforts on dynamic defense in cyber security. Specifically, we firstly introduce basic concepts and define dynamic defense in cyber security. Next, we review the architectures, enabling techniques and methods for moving target defense and mimic defense. This is followed with taxonomically summarizing the implementation and evaluation of dynamic defense. Finally, we discuss some open challenges and opportunities on dynamic defense in cyber security.

Triple methods-based empirical assessment of the effectiveness of adaptive cyber defenses in the cloud

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

SPM: A Novel Hierarchical Model for Evaluating the Effectiveness of Combined ACDs in a Blockchain-Based Cloud Environment

A Cloud Cooperative Attack System for networking anti-stealth combat

A Game Theoretic Method to Model and Evaluate Attack-Defense Strategy in Cloud Computing

Evaluating the Security and Economic Effects of Moving Target Defense Techniques on the Cloud

RAM: A Resource-Aware DDoS Attack Mitigation Framework in Clouds

Dynamic defenses in cyber security: Techniques, methods and challenges

An Automated Security Analysis Framework and Implementation for Cloud

A Novel Threat and Risk Assessment Mechanism for Security Controls in Service Management

Stackelberg-Game-Based Defense Analysis Against Advanced Persistent Threats on Cloud Control System.

Modeling and Analyzing Attack-Defense Strategy of Resource Service in Cloud Computing.

An SRN-Based Model for Assessing Co-Resident Attack Mitigation in Cloud with VM Migration and Allocation Policies*

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net

On Dynamic Recovery of Cloud Storage System under Advanced Persistent Threats

A Review of APT Attack Detection Methods and Defense Strategies.

A method of network attack-defense game and collaborative defense decision-making based on hierarchical multi-agent reinforcement learning

Network defense decision-making based on deep reinforcement learning and dynamic game theory

Optimizing Active Cyber Defense

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Modeling and Analysis of the Decentralized Interactive Cyber Defense Approach