Optimizing the Network Diversity to Improve the Resilience of Networks Against Unknown Attacks

Published

September 1, 2019

Author(s)

Daniel Borbor, Lingyu Wang, Sushil Jajodia, Anoop Singhal

Abstract

Diversity as a security mechanism is receiving renewed interest due to its potential for improving the resilience of software and networks against previously unknown attacks. Recent works show diversity can be modeled and quantified as a security metric at the network level. However, such efforts do not directly provide a solution for improving the network diversity. On the other hand, existing network hardening approaches largely focus on handling vulnerabilities and do not pay special attention to diversity. In this paper, we propose an automated approach to diversifying network services under various cost constraints in order to improve the network's resilience against unknown attacks. Specifically, we first define models for network services and their relationships, diversification options, and the costs. We then formulate the optimization problem of diversifying network services under given cost constraints. We devise optimization and heuristic algorithms for efficiently solving the problem, and we evaluate our approach through simulations.

Citation

Computer Communications

Volume

145

Pub Type

Journals

Download Paper

https://doi.org/10.1016/j.comcom.2019.06.004

Local Download

Keywords

Diversity, Network security, Optimization, Zero day attack

Citation

Borbor, D. , Wang, L. , Jajodia, S. and Singhal, A. (2019), Optimizing the Network Diversity to Improve the Resilience of Networks Against Unknown Attacks, Computer Communications, [online], https://doi.org/10.1016/j.comcom.2019.06.004, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=926444 (Accessed November 21, 2024)