English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Cloud applications expose - besides service endpoints - also potential oractual vulnerabilities. Therefore, cloud security engineering efforts focus onhardening the fortress walls but seldom assume that attacks may be successful.At least against zero-day exploits, this approach is often toothless. Otherthan most security approaches and comparable to biological systems we acceptthat defensive "walls" can be breached at several layers. Instead of hardeningthe "fortress" walls we propose to make use of an (additional) active andadaptive defense system to attack potential intruders - an immune system thatis inspired by the concept of a moving target defense. This "immune system"works on two layers. On the infrastructure layer, virtual machines arecontinuously regenerated (cell regeneration) to wipe out even undetectedintruders. On the application level, the vertical and horizontal attack surfaceis continuously modified to circumvent successful replays of formerly scriptedattacks. Our evaluations with two common cloud-native reference applications inpopular cloud service infrastructures (Amazon Web Services, Google ComputeEngine, Azure and OpenStack) show that it is technically possible to limit thetime of attackers acting undetected down to minutes. Further, more than 98% ofan attack surface can be changed automatically and minimized which makes ithard for intruders to replay formerly successful scripted attacks. So, even ifintruders get a foothold in the system, it is hard for them to maintain it.

Don't Wait to be Breached! Creating Asymmetric Uncertainty of Cloud Applications via Moving Target Defenses