The new method of security development for web services based on Moving Target Defense (MTD) technologies
Mikhail Styugin · 2015
Providing robust defense for websites is the most challenging task when we are developing an information security system. Any website should always be available to all users. And this is the reason why there is an attack that surfaces from this side. Because websites receive data from the environment, this generates vulnerabilities that might be exploited by attackers. Security risks cannot be preventively calculated by a defender because there are a lot of vulnerabilities that will be discovered in the future. These vulnerabilities might be critical for the system. These vulnerabilities are also critical because an intruder can conduct reconnaissance before his attack and this will provide him with more additional benefits than a defender. There is a common method for mitigating these intruder benefits. This method is called Moving Target Defense (MTD). The MTD method is based on continuous change of the system. Hence, when the attacker conducts reconnaissance, he doesn’t obtain current information, so he cannot use it to launch attacks.