Kidemonas: The Silent Guardian
This addresses security challenges for government and industry systems by enabling stealthy defense against APTs, though it appears incremental as it builds on existing detection concepts.
The paper tackles the problem of Advanced Persistent Threats (APTs) by proposing Kidemonas, an architecture for silent detection and secret reporting to deceive attackers and allow defenders time to develop countermeasures, with security analysis demonstrating its features.
Advanced Persistent Threats or APTs are big challenges to the security of government organizations or industry systems. These threats may result in stealth attacks, but if the attack is confronted before the attacker end goal has been achieved, the attackers could become aggressive by changing the mode of attack or by resorting to some form of contingency plan, which might cause unexpected damage. Therefore, the attack detection and the notification to the system administrator should be done surreptitiously. This paper presents an architecture, called Kidemonas, to silently detect the threat and secretly report it to the user or the system administrator. This way the attacker is deceived into carrying out the attack, without sending any clear signal so that the defender can buy time to develop countermeasures to deal with the attack. We consider several attack scenarios and perform a security analysis to demonstrate the features of Kidemonas.