通过自动旋转Kubernetes Pod,ADA持续打乱攻击者目标,提升AI工作负载安全。
ADA: Automated Moving Target Defense for AI Workloads via Ephemeral Infrastructure-Native Rotation in Kubernetes
- 基于Kubernetes容器瞬时性,自动轮换AI服务实例。
- 持续破坏攻击链,无需依赖复杂可信计算技术。
- 适合追求零信任、高敏捷性的AI系统部署者。
本文提出自适应防御代理(ADA),一种创新的自动化动态目标防御(AMTD)系统,旨在从根本上提升AI工作负载的安全性。ADA通过在基础设施层面持续自动轮换这些工作负载,利用Kubernetes Pod的固有瞬时性,系统性地瓦解攻击者假设并打断潜在攻击链,定期销毁并重新生成AI服务实例。该方法将混沌工程原则作为持续主动防御手段,从依赖复杂且昂贵的可信计算方案的传统静态防御模式,转向更灵活、可扩展的新型安全范式。该设计不依赖特定架构,兼容当前主流的代理式与非代理式AI生态,如代理间通信框架(A2A)或模型上下文协议(MCP)。依托广泛部署的云原生Kubernetes技术,该方案实现更易部署、更易维护,并通过轮换机制天然构建零信任环境,推动更快采纳。我们认为,ADA以主动环境扰动替代被动修补,为AI服务提供了更鲁棒、敏捷、高效的零信任模型。
原文摘要 · Abstract (English)
This paper introduces the Adaptive Defense Agent (ADA), an innovative Automated Moving Target Defense (AMTD) system designed to fundamentally enhance the security posture of AI workloads. ADA operates by continuously and automatically rotating these workloads at the infrastructure level, leveraging the inherent ephemerality of Kubernetes pods. This constant managed churn systematically invalidates attacker assumptions and disrupts potential kill chains by regularly destroying and respawning AI service instances. This methodology, applying principles of chaos engineering as a continuous, proactive defense, offers a paradigm shift from traditional static defenses that rely on complex and expensive confidential or trusted computing solutions to secure the underlying compute platforms, while at the same time agnostically supporting the latest advancements in agentic and nonagentic AI ecosystems and solutions such as agent-to-agent (A2A) communication frameworks or model context protocols (MCP). This AI-native infrastructure design, relying on the widely proliferated cloud-native Kubernetes technologies, facilitates easier deployment, simplifies maintenance through an inherent zero trust posture achieved by rotation, and promotes faster adoption. We posit that ADA's novel approach to AMTD provides a more robust, agile, and operationally efficient zero-trust model for AI services, achieving security through proactive environmental manipulation rather than reactive patching.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。