Microservice Moving Target Defense Strategy Based on Adaptive Genetic Algorithm

Microservice architecture can effectively improve the agility of software due to its flexible, scalable and other characte-ristics, and has become the most mainstream method of application delivery in the cloud.However, the microservice splitting makes the attack surface of applications grow explosi...

Full description

Saved in:
Bibliographic Details
Published in:Ji suan ji ke xue Vol. 50; no. 9; pp. 82 - 89
Main Authors: Liu, Xuanyu, Zhang, Shuai, Huo, Shumin, Shang, Ke
Format: Journal Article
Language:Chinese
Published: Chongqing Guojia Kexue Jishu Bu 01.09.2023
Editorial office of Computer Science
Subjects:
Adaptive algorithms
cloud computing|microservice|adaptive genetic algorithm|moving target defense
Configurations
Defense
Genetic algorithms
Moving targets
Rotation
Security
Strategy
ISSN:1002-137X
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Microservice architecture can effectively improve the agility of software due to its flexible, scalable and other characte-ristics, and has become the most mainstream method of application delivery in the cloud.However, the microservice splitting makes the attack surface of applications grow explosively, which brings great challenges to the design of mobile target defense strategy with the core of "strategic defense".To solve this problem, a microservice moving target defense strategy based on adaptive genetic algorithm（AGA）,namely dynamic rotation strategy（DRS）,is proposed.Firstly, based on the characteristics of microservice, the attack path of attackers is analyzed.Then, a microservice attack graph model is proposed to formalize various attack scena-rios, and the security gains and return of defense（RoD） of moving target defense strategies are quantitatively analyzed.Finally, AGA is used to solve the optimal security configuration of mobile target defense, that is, the optimal dynamic rotation cycle of mic
Bibliography:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
ISSN:1002-137X
DOI:10.11896/jsjkx.221000199