Proactive and Dynamic Network Defense

This book discusses and summarizes current research issues, identifies challenges, and outlines future directions for proactive and dynamicnetwork defense. This book also presents the latest fundamentalresearch results toward understanding proactive and dynamic networkdefense by top researchers in related areas. It includes researchresults that offer formal frameworks to define proactive and dynamicnetwork defense, and develop novel models to analyze and evaluateproactive designs and strategies in computer systems, network systems,cyber-physical systems and wireless networks. A wide variety of scientifictechniques have been highlighted to study these problems in thefundamental domain. As the convergence of our physical and digital worlds grows fast pace,protecting information systems from being tampered or unauthorizedaccess is becoming one of the most importance issues. The traditionalmechanisms of network defense are built upon a static, passive, andreactive nature, which has insufficient to defend againsttoday's attackers that attempt to persistently analyze, probe, circumventor fool such mechanisms. It has not yet been fully investigated to addressthe early stage of "cyber kill chain" when adversaries carry outsophisticated reconnaissance to plan attacks against a defense system. Recently, proactive and dynamic network defense has been proposed as animportant alternative towards comprehensive network defense. Tworepresentative types of such defense are moving target defense (MTD) anddeception-based techniques. These emerging approaches show greatpromise to proactively disrupt the cyber-attack kill chain and areincreasingly gaining interest within both academia and industry. However,these approaches are still in their preliminary design stage. Despite thepromising potential, there areresearch issues yet to be solved regardingthe effectiveness, efficiency, costs and usability of such approaches. Inaddition, it is also necessary to identify future research directions andchallenges, which is an essential step towards fully embracing proactiveand dynamic network defense. This book will serve as a great introduction for advanced-level computer scienceand engineering students who would like to start R&D efforts in the field ofproactive and dynamic network defense. Researchers and professionals who work in this relatedfield will also find this book useful as a reference.