Defending against the Unknown Enemy: Applying FlipIt to System Security
Name
Rivest_Defending against.pdf
Size
215.51 KB
Format
Adobe PDF
Checksum (MD5)
74f46be0334a9bea87fb63e24ec369bf
Author(s)
Bowers, Kevin D.
van Dijk, Marten
Griffin, Robert
Juels, Ari
Oprea, Alina
Rivest, Ronald L.
Triandopoulos, Nikos
Date Issued
2012
Journal
Decision and Game Theory for Security
Publisher
Springer Science+Business Media
Citation
Bowers, Kevin D., Marten van Dijk, Robert Griffin, Ari Juels, Alina Oprea, Ronald L. Rivest, and Nikos Triandopoulos. “Defending Against the Unknown Enemy: Applying FlipIt to System Security.” Lecture Notes in Computer Science (2012): 248–263.
Version
Author's final manuscript
Abstract
Most cryptographic systems carry the basic assumption that entities are able to preserve the secrecy of their keys. With attacks today showing ever increasing sophistication, however, this tenet is eroding. “Advanced Persistent Threats” (APTs), for instance, leverage zero-day exploits and extensive system knowledge to achieve full compromise of cryptographic keys and other secrets. Such compromise is often silent, with defenders failing to detect the loss of private keys critical to protection of their systems. The growing virulence of today’s threats clearly calls for new models of defenders’ goals and abilities.
In this paper, we explore applications of FlipIt, a novel game-theoretic model of system defense introduced in [14]. In FlipIt, an attacker periodically gains complete control of a system, with the unique feature that system compromises are stealthy, i.e., not immediately detected by the system owner, called the defender. We distill out several lessons from our study of FlipIt and demonstrate their application to several real-world problems, including password reset policies, key rotation, VM refresh and cloud auditing.
MIT Department
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1007/978-3-642-34266-0_15
