search

JJ / 2020-WCCI-variable-attack-surface

Paper on optimal nginx configuration for generating variable attack surfaces
GNU General Public License v3.0
3 stars 1 forks source link

Clarify connection between EA and MTD (reviewer 1) #39

Closed JJ closed 4 years ago

JJ commented 4 years ago

Thus, EA aims to find a server configuration having the least number of security vulnerabilities (according to ZAP). I do not see where the connection between EA and MTD is? Is it necessary to describe MTD in your paper? I wonder if you could write that you are looking only for the best server configuration parameters? If so, the section "state of the art" should discuss existing approaches to the problem of server configuration optimization rather than moving target defense techniques.