Web Service Applying Moving Target Defense

This paper focuses on studying how Moving Target Defense technology will bring impact about the security and the cost on web service. We propose a novel design named MTD-applying Web Service, a kind of web service based on Moving Target Defense technology, for security enhancement. MTD-applying Web Service unlike traditional web service owning only one static web server and one constant database server, it diversifies its backend sources. Especially, diversification of web servers and database servers makes a great increment of difficulty for attacker to intrude. Finally, a series of experiments also prove our theory effective. According to the result of experiment of evaluating the MTD-applying Web Service system, we can announce that our design can significantly improve the system's security with acceptable cost.