A formalization research on web server and scheduling strategy for heterogeneity
Bolin Ma, Zheng Zhang, Yongsheng Zhu · 2016
Most web service systems are built in a static configuration web server or redundant same web servers. Nonetheless, traditional web service system make it easy for a cyber adversary to plan and launch attacks. To improve the cyber security, mimic security defense where heterogeneity play an important role has been proposed to increase the difficulty for the adversary to launch successful attacks. In this paper, we first present a formal description of heterogeneous web servers and a method how to measure the heterogeneity of web servers. In addition, we also present the scheduling strategy for heterogeneous web servers and demonstrate the effectiveness of this strategy in a general heterogeneous web service system. The strategy of heterogeneous web servers scheduling can disrupt the vicious scan, deceive the judgment about vulnerability and prevent some vulnerabilities being found that make vulnerability attacks difficult.