Improving evolution of service configurations for moving target defense

摘要

The term moving target defense or MTD describes a series of techniques that change the configuration of an Internetfacing system; in general, the technique consists of changing the visible configuration to avoid offering a fixed target to service profiling techniques. Additionally, configurations need to be as secure as possible and, since change needs to be frequent, to generate also as many as possible. We previously introduced a proof of concept where we used a simplified evolutionary algorithm for generating these configurations. In this paper we improve this algorithm, trying to adapt it to the specific characteristics of the fitness landscape, and also looking at finding as many solutions as possible.