AMTDs and ZTNA
Automated Moving Target Defense (AMTD) is an emerging approach to cybersecurity that seeks to disrupt the traditional security model by constantly changing the target that attackers are attempting to breach. Rather than relying on static security measures that can be studied and bypassed by attackers, AMTD seeks to create a dynamic and unpredictable security environment that makes it difficult for attackers to succeed.
In the context of cybersecurity, AMTD involves implementing a variety of measures that make it difficult for attackers to locate and exploit vulnerabilities. These measures might include randomizing network configurations, frequently changing access credentials, and dynamically adjusting network routing paths.
As Lawrence Pingree from Gartner puts it:
- Attackers must discover service ports, protocols, version information, and application or application infrastructure to execute their attacks properly.
- Attack tools (largely scripts) rely on a defined and static attack surface area (also called a vulnerability) – which acts as their key.
- Attackers must maintain a presence on exploited systems (persistence), to execute later stages such as lateral movement, or data theft.
- If the attacker is standing in an ever-changing quicksand (attack surface), their “key” (exploit) can’t open the door (target).
Included with the Cloudbrink Service and AMTD
One example of a technology that employs automated AMTD principles is Cloudbrink's high-performance Zero Trust Network Access (ZTNA) solution (the highest-performing VPN replacement). Cloudbrink's ZTNA employs several automated MTD and Cybersecurity techniques to keep attackers on their toes and minimize the risk of successful breaches.
Rotating certificates in AMTD
One of the key ways that Cloudbrink's ZTNA delivers automated AMTD is by rotating security certificates every 8 hours or less. By constantly changing the certificates used to authenticate user connections, Cloudbrink's ZTNA makes it difficult for attackers to intercept and decrypt traffic Another great advantage is that you never need to worry if you remember to revoke a certificate; the system does it every 8 hours or less.
Temporal PoPs
In addition, Cloudbrink's ZTNA employs a dynamic network architecture that can use thousands of elastic Points of Presence (POPs) called FAST Edges (Flexible, Autonomous, Smart & Temporal). These FAST Edges are temporal, meaning that they only exist for as long as a user is connected to the network. This means there is no fixed place for attackers to target, making it difficult for them to gain a foothold in the network. Plus, if they were to gain a presence, the FAST edge would not last long enough for them to execute later stages such as lateral movement.
Moving Target Defense is an innovative and effective approach to cybersecurity that seeks to create a constantly changing and unpredictable security environment. Cloudbrink's ZTNA is an excellent example of how MTD can be implemented in practice to deliver a high-performance and secure network access solution. By rotating security certificates every 8 hours and using elastic Points of Presence that are temporal, Cloudbrink's high-performance ZTNA provides an excellent example of how MTD can be implemented in practice to deliver a high-performance and secure network access solution.
So take the plunge today and start experiencing high productivity with Cloudbrink!
- Request a demonstration here
- See the ESG group’s technical validation.
- Got questions? Contact our team using this form.
