Real-time Adversarial Characterization and Adaptive Software Protection Countermeasures

This proposal seeks to address the problem of computer system survivability. Survivability can be defined as the capability of a system to fufill its mission in the presence of attacks, failures, or accidents. Properties that increase survivability include resistance to attacks, the recognition of attacks and resulting damage, the recovery of essential services following an attack, and the ability to adapt to minimize the damage from future attacks. In general, the biological immune system performs better at these survivability tasks than current computer security systems. For this reason, we have chosen to look to the biological immune system for inspiration in designing am adaptive cyber attack response mechanism. The final goal of the effort will be an adaptive, light weight, multi-layered response system that intrinsically promotes system survivability.