A layer-crossing multi-factor and dynamic security model over a moving target defence. (27th August 2021)

• Record Type: Journal Article
• Authors: Cui, Zhanwei; Zeng, Jianping; Wu, Chengrong
• Is Part Of: International journal of information and computer security. Volume 16:Number 1/2(2021)
• Page Start: 150
• Page End: 169
• Publication Date: 2021-08-27
• Subjects: moving target defence -- layer-crossing -- multi-parameter -- security model -- optimisation analysis; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1744-1765

Abstract

Moving target defence mainly focus on the single parameter hopping and rarely refer to the hopping of multiple parameters in multiple layers. With the background of database security, this paper constructs a layer-crossing, multi-parameter and dynamic security model over moving target defence. Seven parameters which belong to different layers in the database application are defined, and two mathematical functions of successful attack probability and the reconnection time of the legitimate users are proposed. Then through mathematical analysis, this paper comes to the conclusion that it is impossible to let the successful attack probability and the average reconnection time take the minimum values at the same time. Finally, under specific scenarios, the specific expressions of the two functions and the optimal hopping interval of each parameter are present. The model proposed is not only applicable to the security of database system, but also to other information systems.