A Novel Network Proactive Defense Model: Anomaly Driven Dynamic Cooperative Defense Model
Lixun Li, Zhang Bin, Haoming Wu, Yingbo Li · IOP Conference Series Materials Science and Engineering · 2018
To defend the more complex and stealthy network attacks, an anomaly driven dynamic cooperative defense model (ADCD) is proposed in this paper. ADCD takes anomalies as defense drive factors to identify network attack types and evaluate system security state. And according to the anomaly processing result, ADCD can combine network cooperative defense (NCD) with moving target defense (MTD) to defend known and unknown network attacks. Firstly, detail explanations of ADCD is given, including its elements, operations, relations and rules. Then, a formal analysis of ADCD is conducted based on finite state machine (FSM) to prove its security. Finally, A typical application scenario where ADCD is realized as a mutiagent system is displayed to verify the effectiveness of ADCD in defending complex and multi-step attacks.