Improving Cyber Resiliency of Cloud Application Services by Applying Software Behavior Encryption (SBE)

The objective of this work is to define and measure cyber resiliency of the “cloud” in a Moving Target Defense (MTD) environment that applies the Software Behavior Encryption (SBE) method. Implementation of SBE has shown to increase vulnerability tolerance in a particular software system by introducing software diversity and redundant version shuffling to obfuscate the system to attackers. With this in mind, this paper nominates attack surface, confidentiality, integrity, availability, and survivability as the critical components of cyber resiliency, and a notional example is provided to demonstrate the components application and aggregation.