Moving Target Defense - Evasive Maneuvers in Cyberspace

Explore moving target defense strategies and evasive maneuvers in cyberspace through this informative conference talk. Delve into attack patterns, security design principles, and the concept of adequate protection. Examine why vulnerable assets sometimes escape exploitation and compromise. Learn about various moving target defense techniques, including Address Space Layout Randomization (ASLR), Instruction Set Randomization (ISR), Kernel Interface Diversification, Compiler-Generated Diversity, and Data Structure Layout Randomization. Analyze the entropy problem and scalable binary diversification. Gain insights into the theoretical framework for an MTD strategy and potential resistance to these approaches. Engage in a thought-provoking discussion on the future of cybersecurity defenses.

Syllabus

Introduction
Attack Patterns
Security Design Principle of Adequate Protection
A Hopeless Defense
Why Do Vulnerable Assets Escape Exploitation and Compromise?
Moving Target Defense
Managing the Attack Surface
Address Space Layout Randomization (ASLR)
Instruction Set Randomization (ISR)
Kernel Interface Diversification
Compiler-Generated Diversity
Data Structure Layout Randomization
The Entropy Problem
Scalable Binary Diversification
Theoretical framework for an MTD Strategy
Resistance to MTD Strategy
Discussion