Information Security Commons^™

Architecture-Based Self-Protection: Composing And Reasoning About Denial-Of-Service Mitigations, Bradley Schmerl, Javier Camara, Jeffrey Gennari, David Garlan, Paulo Casanova, Gabriel A. Moreno, Thomas J. Glazierr, Jeffrey M. Barnes

Gabriel A. Moreno

Security features are often hardwired into software applications, making it difficult to adapt security responses to reflect changes in runtime context and new attacks. In prior work, we proposed the idea of architecture-based self-protection as a way of separating adaptation logic from application logic and providing a global per- spective for reasoning about security adaptations in the context of other business goals. In this paper, we present an approach, based on this idea, for combating denial-of-service (DoS) attacks. Our approach allows DoS-related tactics to be composed into more so- phisticated mitigation strategies that encapsulate possible responses to a security problem. …