Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)

Danny Thebeau; Benjamin Reidy; Ricardo Valerdi; Avinash Gudagi; Hemayamini Kurra; Youssif Al-Nashif; Salim Hariri; Frederick Sheldon

doi:10.1016/j.procs.2014.03.009

Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)

Danny Thebeau, Benjamin Reidy, Ricardo Valerdi, Avinash Gudagi, Hemayamini Kurra, Youssif Al-Nashif, Salim Hariri, Frederick Sheldon

Research output: Contribution to journal › Conference article › peer-review

4 Scopus citations

Abstract

The objective of this work is to define and measure cyber resiliency of the "cloud" in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation

Original language	English (US)
Pages (from-to)	62-70
Number of pages	9
Journal	Procedia Computer Science
Volume	28
DOIs	https://doi.org/10.1016/j.procs.2014.03.009
State	Published - 2014
Event	12th Annual Conference on SystemsEngineering Research, CSER 2014 - Redondo Beach, CA, United States Duration: Mar 21 2014 → Mar 22 2014

Keywords

Attack Surface
Availability
Confidentiality
Integrity
Moving Target Defense (MTD)
Resiliency
Software Behavior Encryption (SBE)
Storage Dynamic Encryption (SDE)
Survivability

ASJC Scopus subject areas

General Computer Science

Access to Document

10.1016/j.procs.2014.03.009

Cite this

@article{af423f7739c74bc98625d54015ca708c,

title = "Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)",

abstract = "The objective of this work is to define and measure cyber resiliency of the {"}cloud{"} in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation",

keywords = "Attack Surface, Availability, Confidentiality, Integrity, Moving Target Defense (MTD), Resiliency, Software Behavior Encryption (SBE), Storage Dynamic Encryption (SDE), Survivability",

author = "Danny Thebeau and Benjamin Reidy and Ricardo Valerdi and Avinash Gudagi and Hemayamini Kurra and Youssif Al-Nashif and Salim Hariri and Frederick Sheldon",

year = "2014",

doi = "10.1016/j.procs.2014.03.009",

language = "English (US)",

volume = "28",

pages = "62--70",

journal = "Procedia Computer Science",

issn = "1877-0509",

publisher = "Elsevier BV",

note = "12th Annual Conference on SystemsEngineering Research, CSER 2014 ; Conference date: 21-03-2014 Through 22-03-2014",

}

TY - JOUR

T1 - Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)

AU - Thebeau, Danny

AU - Reidy, Benjamin

AU - Valerdi, Ricardo

AU - Gudagi, Avinash

AU - Kurra, Hemayamini

AU - Al-Nashif, Youssif

AU - Hariri, Salim

AU - Sheldon, Frederick

PY - 2014

Y1 - 2014

N2 - The objective of this work is to define and measure cyber resiliency of the "cloud" in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation

AB - The objective of this work is to define and measure cyber resiliency of the "cloud" in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation

KW - Attack Surface

KW - Availability

KW - Confidentiality

KW - Integrity

KW - Moving Target Defense (MTD)

KW - Resiliency

KW - Software Behavior Encryption (SBE)

KW - Storage Dynamic Encryption (SDE)

KW - Survivability

UR - http://www.scopus.com/inward/record.url?scp=84897986856&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84897986856&partnerID=8YFLogxK

U2 - 10.1016/j.procs.2014.03.009

DO - 10.1016/j.procs.2014.03.009

M3 - Conference article

SN - 1877-0509

VL - 28

SP - 62

EP - 70

JO - Procedia Computer Science

JF - Procedia Computer Science

T2 - 12th Annual Conference on SystemsEngineering Research, CSER 2014

Y2 - 21 March 2014 through 22 March 2014

ER -

Improving cyber resiliency of cloud application services by applying Software Behavior Encryption (SBE)

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this