面向Linux容器弹性的智能移动目标防御
Toward Smart Moving Target Defense for Linux Container Resiliency
摘要：
本文提出了一种用于云容器的通知移动目标防御机制ESCAPE。ESCAPE将攻击者和目标容器之间的交互建模为“捕食者寻找猎物”的搜索游戏。Linux容器（猎物）的实时迁移用于避免攻击（捕食者）和失败。整个过程由一个新型的基于主机的行为监控系统指导，该系统可以无缝监控容器的入侵和攻击迹象。为了评估ESCAPE的有效性，我们模拟了攻击回避过程的基础上，模仿的猎物与捕食者搜索游戏的数学模型。仿真结果表明，高集装箱生存概率与最小的额外开销。
英文摘要：
This paper presents ESCAPE, an informed moving target defense mechanism for cloud containers. ESCAPE models the interaction between attackers and their target containers as a "predator searching for a prey" search game. Live migration of Linux-containers (prey) is used to avoid attacks (predator) and failures. The entire process is guided by a novel host-based behavior-monitoring system that seamlessly monitors containers for indications of intrusions and attacks. To evaluate ESCAPE effectiveness, we simulated the attack avoidance process based on a mathematical model mimicking the prey-vs-predator search game. Simulation results show high container survival probabilities with minimal added overhead.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
