Predictive Moving Target Defense

Abstract--There are substantial potential benefits to considering predictability when designing defenses against adaptive adversar- ies, including increasing the ability of defense systems to predict new attacker behavior and reducing the capacity of adversaries to anticipate defensive actions. This paper adopts such a perspec- tive, leveraging the coevolutionary relationship between attackers and defenders to derive methods for predicting and countering attacks and for limiting the extent to which adversaries can learn about defense strategies. The proposed approach combines game theory with machine learning to model adversary adaptation in the learner's feature space, thereby producing classes of predic- tive and "moving target" defenses which are scientifically- grounded and applicable to problems of real-world scale and complexity. Case studies with large cyber security datasets dem- onstrate that the proposed algorithms outperform gold-standard techniques, offering effective and robust defense against evolving adversaries.