國立虎尾科技大學 |

A Moving Target Defense Approach Towards Security and Resilience in Web Servers.

紀錄類型:	書目-語言資料,手稿 : Monograph/item
正題名/作者:	A Moving Target Defense Approach Towards Security and Resilience in Web Servers./
作者:	Wright-Hamor, Cimone Le.
面頁冊數:	1 online resource (81 pages)
附註:	Source: Dissertations Abstracts International, Volume: 83-12, Section: B.
Contained By:	Dissertations Abstracts International83-12B.
標題:	Information science. -
電子資源:	click for full text (PQDT)
ISBN:	9798819385746

A Moving Target Defense Approach Towards Security and Resilience in Web Servers.
Wright-Hamor, Cimone Le.

A Moving Target Defense Approach Towards Security and Resilience in Web Servers. - 1 online resource (81 pages)

Source: Dissertations Abstracts International, Volume: 83-12, Section: B.

Thesis (Ph.D.)--Iowa State University, 2022.

Includes bibliographical references

Websites have become mission-critical systems that support essential business functions. Consequently, the infrastructure that supports websites has become a lucrative target. The asymmetric design of most network infrastructures makes it easy to configure and manage. However, the asymmetric design also makes the network effortless to attack because the design is static. The static nature of the infrastructure provides the attacker with a virtually infinite amount of time to accurately fingerprint, plan, and execute an attack as the dependence on websites grows and the shortage of qualified IT professionals increases, the need for proactive security solutions surges. Thus, a non-static system may increase security. Moving Target Defense (MTD) emerged as a security strategy designed to induce confusion for the attacker by using a migratory network design. Research regarding individual applications of MTD focus on modeling the interactions between the adversary and the defender, and applications focus on network-based solutions. However, their little research focuses on applying the MTD strategy for web servers. A web server MTD solution could potentially defend against a broader range of attacks with minimal impact on the user and the system. Thus, this research investigates the performance impacts and deterrence of using a firewall as an MTD mechanism designed to protect web servers. This work compares three firewall-based MTD solutions for web servers and their respective impacts on the user, the system, and the adversary. The results illustrate how different firewall-based MTD implementations can affect the information an attacker needs to exploit a system's vulnerabilities to introduce uncertainty and reduce the likelihood of successful attacks.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798819385746Subjects--Topical Terms:

561178
Information science.
Subjects--Index Terms:

Moving target defenseIndex Terms--Genre/Form:

554714
Electronic books.

A Moving Target Defense Approach Towards Security and Resilience in Web Servers.
LDR:03078ntm a22003617 4500 001 1147087
005 20240909062211.5
006 m o d
007 cr bn ---uuuuu
008 250605s2022 xx obm 000 0 eng d
020 $a 9798819385746
035 $a (MiAaPQ)AAI29068767
035 $a AAI29068767
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Wright-Hamor, Cimone Le. $3 1472713
245 1 2 $a A Moving Target Defense Approach Towards Security and Resilience in Web Servers.
264 0 $c 2022
300 $a 1 online resource (81 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 83-12, Section: B.
500 $a Advisor: Jacobson, Doug W.
502 $a Thesis (Ph.D.)--Iowa State University, 2022.
504 $a Includes bibliographical references
520 $a Websites have become mission-critical systems that support essential business functions. Consequently, the infrastructure that supports websites has become a lucrative target. The asymmetric design of most network infrastructures makes it easy to configure and manage. However, the asymmetric design also makes the network effortless to attack because the design is static. The static nature of the infrastructure provides the attacker with a virtually infinite amount of time to accurately fingerprint, plan, and execute an attack as the dependence on websites grows and the shortage of qualified IT professionals increases, the need for proactive security solutions surges. Thus, a non-static system may increase security. Moving Target Defense (MTD) emerged as a security strategy designed to induce confusion for the attacker by using a migratory network design. Research regarding individual applications of MTD focus on modeling the interactions between the adversary and the defender, and applications focus on network-based solutions. However, their little research focuses on applying the MTD strategy for web servers. A web server MTD solution could potentially defend against a broader range of attacks with minimal impact on the user and the system. Thus, this research investigates the performance impacts and deterrence of using a firewall as an MTD mechanism designed to protect web servers. This work compares three firewall-based MTD solutions for web servers and their respective impacts on the user, the system, and the adversary. The results illustrate how different firewall-based MTD implementations can affect the information an attacker needs to exploit a system's vulnerabilities to introduce uncertainty and reduce the likelihood of successful attacks.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Information science. $3 561178
650 4 $a Computer engineering. $3 569006
653 $a Moving target defense
653 $a Web Security
653 $a Mission-critical systems
655 7 $a Electronic books. $2 local $3 554714
690 $a 0464
690 $a 0723
710 2 $a Iowa State University. $b Electrical and Computer Engineering. $3 1179387
710 2 $a ProQuest Information and Learning Co. $3 1178819
773 0 $t Dissertations Abstracts International $g 83-12B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=29068767 $z click for full text (PQDT)