Study of Dynamic Defense technique to overcome drawbacks of moving target defense

摘要

Attacker typically begin the attack by reconnaissance phase in which they monitor the network and probe it over a period of time. When an attack surface is static, an attacker can monitor the network, identify vulnerabilities and entry points and build efficient and targeted attacks. A Moving Target Defense is a way to disrupt the reconnaissance phase as it provides attack surface which constantly changes. An attacker then trying to probe and identifying vulnerabilities of false system which may required more resources as well as increase the risk of detection. Moving Target Defense technique either alters network configuration to limit the usefulness of an attacker reconnaissance or change computers appearance over time using TCP/IP fingerprint obfuscator but there is a new concept which leaves the defended system at rest and makes the Defense Dynamic. Dynamic Defense is a new defense technique that removes hacker ability to depend on previous information without introducing motion in the network infrastructure. This paper provides a comparative analysis of Moving Target Defense and Moving Defense Technique.