Soon, self-adapting computer network that defends itself against hackers
Washington: In the online struggle for network protection, cybersecurity experts are adding an ally to the security force: the computer network itself.
Kansas State University researchers including Scott DeLoach, professor of computing and information sciences, and Xinming “Simon” Ou, associate professor of computing and information sciences, are researching the feasibility of building a computer network that could protect itself against online attackers by automatically changing its setup and configuration.
The study will be the first to document whether this type of adaptive cybersecurity, called moving-target defense, can be effective.
If it can work, researchers – also including students Rui Zhuang, Su Zhang and Alexandru Bardas - will determine if the benefits of creating a moving-target defense system outweigh the overhead and resources needed to build it.
As the study progresses the computer scientists will develop a set of analytical models to determine the effectiveness of a moving-target defense system.
They will also create a proof-of-concept system as a way to experiment with the idea in a concrete setting.
“It`s important to investigate any scientific evidence that shows that this approach does work so it can be fully researched and developed,” DeLoach said.
He started collaborating with Ou to apply intelligent adaptive techniques to cybersecurity several years ago after a conversation at a university open house.
The term moving-target defense - a subarea of adaptive security in the cybersecurity field - was first coined around 2008, although similar concepts have been proposed and studied since the early 2000s.
The idea behind moving-target defense in the context of computer networks is to create a computer network that is no longer static in its configuration.
Instead, as a way to thwart cyber attackers, the network automatically and periodically randomizes its configuration through various methods - such as changing the addresses of software applications on the network; switching between instances of the applications; and changing the location of critical system data.
Ou and DeLoach said the key is to make the network appear to an attacker that it is changing chaotically while to an authorized user the system operates normally.
“If you have a Web server, pretty much anybody in the world can figure out where you are and what software you`re running,” DeLoach said.
“If they know that, they can figure out what vulnerabilities you have. In a typical scenario, attackers scan your system and find out everything they can about your server configuration and what security holes it has. Then they select the best time for them to attack and exploit those security holes in order to do the most damage. This could change that.”
Creating a computer network that could automatically detect and defend itself against cyber attacks would substantially increase the security of online data for universities, government departments, corporations and businesses - all of which have been the targets of large-scale cyber attacks.
In February 2011 it was discovered that the Nasdaq Stock Market`s computer network had been infiltrated by hackers.
Although federal investigators concluded that it was unlikely the hackers stole any information, the network`s security had been left vulnerable for more than a year while the hackers visited it numerous times.
According to Ou, creating a moving-target defense system would shift the power imbalance that currently resides with hackers - who need only find a single security hole to exploit - back to the network administrators - who would have a system that frequently removes whatever security privileges attackers may gain with a new clean slate.
“This is a game-changing idea in cybersecurity,” Ou said.
“People feel that we are currently losing against online attackers. In order to fundamentally change the cybersecurity landscape and reduce that high risk we need some big, fundamental changes to the way computers and networks are constructed and organized,” Ou added.
More from India
More from World
More from Sports
More from Entertaiment
- Delhi's 2015 CBSE Class 12 topper M Gayatri talks to Zee Media
- One year of Modi govt: PM promises to fulfil aspirations
- Watch: Mumbai cops find new secret agents in housewives!
- No respite from heat for next three days: IMD
- DNA: Sikh man in New Zealand removed his turban to help injured kid
- One year of Modi govt: PM addresses mega rally in Mathura
- Hundreds die as heat wave continues in India
- 2G scam: Ex-TRAI chief alleges Manmohan Singh had warned him to cooperate
- Growing medical negligence in Delhi's AIIMS
- DNA: AIIMS doctor removes both kidneys of minor, claims she had only one
- Pranab Mukherjee defends Bofors scam, says it was just a media trial
- Salman Khan attends sister Arpita's wedding reception in Mandi
- Zee Media's mega survey on Modi govt
- Zee Media Exclusive: Vidya Balan chats about 'Hamari Adhuri Kahani'
- One year of Modi govt: PM Modi addresses mega rally in Mathura Part-II
- PM Narendra Modi's Mathura rally: As it happened
- Public rally on 100 days of AAP govt: As it happened
- One year of NDA govt: PM Modi writes open letter to nation, promises to transform India
- World optimistic about India: PM Narendra Modi on 1 year of NDA govt
- MSBSHSE Class 12th HSC results 2015 to be declared at 1pm tomorrow
- Bharatiya Janata Party lacks majority for Ram Temple, Article 370: Amit Shah
- AAP govt moves resolution against MHA notification: As it happened
- Arpita-Aayush wedding reception: Salman Khan spreads love in Mandi, says `hum aapke hain`
- China doesn't recognise 'illegal' McMahon Line: Beijing responds to NSA Ajit Doval
- CBSE 10th Results 2015 to be declared on May 27
- Rahul Gandhi takes a dig at one year of Modi govt, wishes 'happy birthday' to 'suit-boot ki sarkar'
- Is there life after death?
- Heatwave kills 90 more in Andhra, Telangana; toll crosses 800
- UBSE Results 2015 (ubse.uk.gov.in): Uttarakhand 12th Result 2015 to be announced today at 11 AM
- Check WBBSE (wbresults.nic.in) Class 12th Results: West Bengal Board (wbscvet.org) Higher Secondary Class XII Vocational Results declared