Active, Self-Healing Cybersecurity

 Ideal, intelligent, but like AI, how generally practical today? 

On Active, Self-Healing Cybersecurity

ACM NEWS, Active Defenders

By David Geer, Commissioned by CACM Staff, September 30, 2021

The U.S. Federal Bureau of Investigation (FBI) Internet Crime Complaint Center received 791,790 cybercrime complaints in 2020, with losses exceeding US$4.1 billion, according to the FBI's 2020 Internet Crime Report. Cyberthugs have been automating cyberattacks for years using tools such as command and control (C&C) servers to puppet their botnets and malicious infections. Cybersecurity needs to automate its response to the schemes of these criminal hackers.

According to Innovation Origins, a European platform for independent journalists who write about innovation, start-ups, and "technologies that will shape the world of tomorrow," Dutch bank ABN AMRO will use self-healing cybersecurity software developed by TNO (The Netherlands Organization for Applied Science Research) to protect applications running in software containers. Containerization benefits software development with standardized application container images that accelerate secure development and deployment. The human immune system inspired the self-healing concept, which will replace containers periodically to remove unknown infections. The self-regenerating software solution will replenish containers when security monitoring and threat detection tools identify infections.

Developers from TNO created and integrated software called Lympho, which implements the Self-Healing-4-Cyber-Security (SH4CS) concept, with Kubernetes + Docker platforms to heal containers through regeneration automatically. Kubernetes is a popular open-source container orchestration platform from Google, which many organizations use to develop and deploy their software. Docker is a popular open-source application container platform that automates deployment, typically using container images.  ... '