Not logged in.

Contribution Details

Type Bachelor's Thesis
Scope Discipline-based scholarship
Title Mitigating Cyberattacks Affecting Resource-constrained Devices Through Moving Target Defense (MTD) Mechanisms
Organization Unit
Authors
  • Jordan Cedeno
Supervisors
  • Alberto Huertas Celdran
  • Jan Von der Assen
  • Burkhard Stiller
Language
  • English
Institution University of Zurich
Faculty Faculty of Business, Economics and Informatics
Date 2022
Abstract Text Most Internet of Things (IoT) devices such as radio spectrum sensors are not designed and built with security in mind. The static nature of such IoT devices coupled with the resource constrains under which they operate, makes such devices a lucrative target for cyberattacks. One option when it comes to dealing with such cyberattacks is employing Moving Target Defense (MTD) in which some system parameters are ”moved” in order to disrupt an ongoing attack. This thesis aims to propose, design and implement a prototypical lightweight MTD based framework (MTD Framework) for Linux based IoT devices such as radio spectrum sensors, which is capable of deploying host-based MTD security solutions (MTD Solutions) based on reported attacks/events from an external program monitoring for attacks/events. Furthermore, this thesis implements a total of four MTD based security solutions to deal with the following three malware families once they have already infected the system: command & control based malware, crypto ransomware, user-level rootkits (using preloads). To test the effectiveness of the MTD Framework and the MTD Solutions they were tested against real malware to see how they perform. Additionally some performance data is gathered to present the additional resource consumption that the MTD Framework incurs. The results are promising and suggest that the MTD Framework combined with the MTD Solutions proposed and implemented in this thesis work well as an additional security layer which is capable of disrupting/disabling running malware of the above mentioned malware families.
PDF File Download
Export BibTeX