Improving Cyber Resiliency of Cloud Application Services by Applying Software Behavior Encryption (SBE)
Danny Thebeau, Benjamin Reidy, Ricardo Valerdi, Avinash Gudagi, Hemayamini Kurra, Youssif B. Al-Nashif, Salim Hariri, Frederick T. Sheldon · Procedia Computer Science · 2014
The objective of this work is to define and measure cyber resiliency of the “cloud” in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method. Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers. With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation.