Decision Support for Combining Security Mechanisms using Exploratory Evolutionary Testing

Jonathan Hudson and Jörg Denzinger

appeared in:
Proc. ICTAI 2020, Baltimore, 2020, pp. 550-557.


Abstract

We present a process utilizing an evolutionary learning method to explore combinations of security mechanisms with regard to performance problems they might create for a particular user profile. For each combination, the process uses an evolutionary search to identify sequences of interactions with a computer (in form of a virtual machine) that stress the system to a much larger degree with the combination installed than without it. The process then compares the mechanism combinations using the "best sequences" for each combination to suggest the combination that overall has the least impact on performance. The process also explores interaction sequences that caused system failure, or were not able to finish within the given time limit, to identify incompatibilities between security mechanisms. For evaluation, the process was applied to create a tool for finding the best set of multiple anti-virus software systems for Windows XP. In the primary evaluation, the tool identified a set of five mechanisms that did not degrade performance too far, while providing the intended security coverage. At the same time, the tool found a clear incompatibility between two mechanisms as demonstrated by a zip operation failure after only a few interactions.


Download full paper (publisher's page)

Generated: 6/12/20