An SDN‐based MTD model. (18th October 2018)

• Record Type: Journal Article
• Authors: Yang, Yubin; Cheng, Liming
• Other Names: Xiang Yang guestEditor.; Alam Bhuiyan Md Zakirul guestEditor.; Castiglione Aniello guestEditor.; Wang Yu guestEditor.; Shen Hong guestEditor.; Tian Hui guestEditor.; Sang Yingpeng guestEditor.; Acacio Manuel E. guestEditor.; Sahuquillo Julio guestEditor.
• Is Part Of: Concurrency and computation. Volume 31:Number 21(2019)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2018-10-18
• Subjects: Moving Target Defense (MTD) -- OpenFlow -- Random Host Mutation (RHM) -- Software‐Defined Network (SDN); Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.4897
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: An SDN‐based moving target defense (MTD) model maps the physical network elements to a considerably larger space than the original address space and creates different times of validity randomly to generate mapping addresses on the basis of the security level of the targets accessed, making it more difficult for attackers to find the targets. The methods used to make the MTD technique work include generating different times of validity and coefficients of difficulty for the address mapping randomly based on the security level of the targets accessed, changing the mapping destination IPv4 to IPv6 (to increase the target space by several orders of magnitude), transforming the IP, MAC addresses, and the protocol ports, and mapping the SDN network elements. All of these measures increase the difficulty of network reconnaissance, making it more difficult for attackers to obtain authentic target information. In this paper, we present the relevant technological background, discuss the design of a new security adaptive system model based on SDN, and propose a target security level identification algorithm and a network element information mapping algorithm.