Self-Shielding Systems and Attack-Surface Mutation

3 Sigma Research investigates an advanced concept, called the Mutating Attack-Surface Investigation (MASI), to increase network protection by continuously modifying and dynamically mutating the network profile. This approach addresses the attacker’s tactic of network mapping and the assumption of a static network target. The architecture implementation uses virtual machine hypervisor technology to test and evaluate scenarios based on clearly defined metrics. While network nodes can be individual physical machines, our VM approach provides an architecture implementation that allows easy creation of different test configurations, such as multiple virtual network cards, virtual switch connections, varying operating system configurations. The results of the Phase I effort provide sufficient detail to demonstrate proof-of-concept and validate the feasibility of the envisioned system. BENEFIT: The agent-based attack-surface mutating network described in this proposal has very broad applicability. Many government and commercial organizations recognize the threat from network attacks. Since many of these attacks rely on profiling networks to discover services, this technology has the potential to protect vital networked assets through continual, dynamic mutation. Current architectures that implement static network configurations provide an easy and reliably fixed target of opportunity for the attacker. Areas such as military command and control networks, agencies involved in Intelligence, Surveillance, and Reconnaissance, scientific research, medical organizations, government contractors, and commercial companies are examples of organizations that can benefit from this technology.