A moving target defense and network forensics framework for ISP networks using SDN and NFV

Aydeger, Abdullah; Saputro, Nico; Akkaya, Kemal

doi:10.1016/j.future.2018.11.045

Cited by 54 publications

(33 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Aydeger et al [13] proposed an SDN-based route mutation technique to deal with DDoS attacks which are validated via the implementation on the Mininet emulator with a Floodlight SDN controller. Further, Aydeger et al [14] defined a route mutation MTD technique for the Internet Service Provider (ISP) network context through NFV and virtual shadows network aiming to thwart possible DDoS attack. Their route mutation method makes it difficult for the attackers to perform attack reconnaissance phase and obtain network topology information.…”

Section: Emulation Model-based Mtd Evaluationmentioning

confidence: 99%

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

Cho

Sharma

Alavizadeh

et al. 2020

IEEE Commun. Surv. Tutorials

221

View full text Add to dashboard Cite

Reactive defense mechanisms, such as intrusion detection systems, have made significant efforts to secure a system or network for the last several decades. However, the nature of reactive security mechanisms has limitations because potential attackers cannot be prevented in advance. We are facing a reality with the proliferation of persistent, advanced, intelligent attacks while defenders are often way behind attackers in taking appropriate actions to thwart potential attackers. The concept of moving target defense (MTD) has emerged as a proactive defense mechanism aiming to prevent attacks. In this work, we conducted a comprehensive, in-depth survey to discuss the following aspects of MTD: key roles, design principles, classifications, common attacks, key methodologies, important algorithms, metrics, evaluation methods, and application domains. We discuss the pros and cons of all aspects of MTD surveyed in this work. Lastly, we highlight insights and lessons learned from this study and suggest future work directions. The aim of this paper is to provide the overall trends of MTD research in terms of critical aspects of defense systems for researchers who seek for developing proactive, adaptive MTD mechanisms.

show abstract

Section: Emulation Model-based Mtd Evaluationmentioning

confidence: 99%

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

Cho

Sharma

Alavizadeh

et al. 2020

IEEE Commun. Surv. Tutorials

221

View full text Add to dashboard Cite

show abstract

“…Regarding MTD research, Aydeger et al [9] analyzed crossfire attack planning and utilized the analyzed results to develop the defense mechanism that in turn reorganizes the routes in such a way that the congested links are avoided during packet forwarding. In addition, for use when implementing MTD mechanisms via route mutation, Aydeger et al [10] proposed various virtual shadow networks created through network functions virtualization (NFV), which can dynamically change the routes for specific reconnaissance packets so that attackers will not be able to easily identify the actual network topologies. Zeitz et al [11] explored the uses of a micromoving target IPv6 defense (µMT6D).…”

Section: Related Workmentioning

confidence: 99%

Mimic Encryption Box for Network Multimedia Data Security

Zhou

et al. 2020

Security and Communication Networks

View full text Add to dashboard Cite

With the rapid development of the Internet, the security of network multimedia data has attracted increasingly more attention. The moving target defense (MTD) and cyber mimic defense (CMD) approaches provide a new way to solve this problem. To enhance the security of network multimedia data, this paper proposes a mimic encryption box for network multimedia data security. The mimic encryption box can directly access the network where the multimedia device is located, automatically complete the negotiation, provide safe and convenient encryption services, and effectively prevent network attacks. According to the principles of dynamization, diversification, and randomization, the mimic encryption box uses a reconfigurable encryption algorithm to encrypt network data and uses IP address hopping, port number hopping, protocol camouflage, and network channel change to increase the attack threshold. Second, the mimic encryption box has a built-in pseudorandom number generator and key management system, which can generate an initial random key and update the key with the hash value of the data packet to achieve “one packet, one key.” Finally, through the cooperation of the ARM and the FPGA, an access control list can be used to filter illegal data and monitor the working status of the system in real time. If an abnormality is found, the feedback reconstruction mechanism is used to “clean” the FPGA to make it work normally again. The experimental results and analysis show that the mimic encryption box designed in this paper has high network encryption performance and can effectively prevent data leakage. At the same time, it provides a mimic security defense mechanism at multiple levels, which can effectively resist a variety of network attacks and has high security.

show abstract

“…It exploits OpenFlow to provide virtual IP address to different nodes in the network using a predefined frequency. Aydeger et al [6] proposed a MTD framework using SDN and Network Function Virtualization (NFV). The main motivation of their work is to exploit the benefits of both SDN and NFV for MTD design along with forensic capabilities.…”

Section: Related Workmentioning

confidence: 99%

“…It fundamentally decouples the network control plane from forwarding data plane [4]. In recent past, there is a trend to design MTD solutions using Software Defined Networking (SDN) [5][6][7][8]. SDN substantially enhance the utilization of resources in the network, provides simplified network management, reeducation in operating cost and provides opportunities for network innovation and evaluation.…”

Section: Introductionmentioning

confidence: 99%

Distributed Shadow Controllers based Moving Target Defense Framework for Control Plane Security

Hyder¹,

Ismail²

2019

IJACSA

View full text Add to dashboard Cite

Moving Target Defense (MTD) has drawn substantial attention of research community in recent past for designing secure networks. MTD significantly reduced the asymmetric advantage of attackers by constantly changing the attack surface. In this paper Software Defined Networking (SDN) based MTD framework SMTSC (SDN based MTD framework using Shadow Controllers) has been proposed. Although the previous work in SDN based MTD targets the Data plane security, we exploit MTD for the protection of Control plane of SDN. The proposed solution uses the concept of Shadow Controllers for producing dynamism in order to provide security at the Control plane of SDN environment. We proposed the concepts of Shadow Controllers for throttling the reconnaissance attacks targeting Controllers. The advantage of our approach is multifold. First it exploits the mechanism of MTD for providing security in the Control plane. The other advantage is that the multi-controller approach provides higher availability in the SDN network. Another critical gain is the lower computational overhead of SMTSC. Mininet and ONOS Controller are used to implement the proposed framework. The effectiveness and overheads of the framework is evaluated in terms of attacker's effort, defender cost and complexity introduced in the network. Results demonstrated promising trends for the protection of Control plan of SDN environment.

show abstract

A moving target defense and network forensics framework for ISP networks using SDN and NFV

Cited by 54 publications

References 14 publications

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

Mimic Encryption Box for Network Multimedia Data Security

Distributed Shadow Controllers based Moving Target Defense Framework for Control Plane Security

Contact Info

Product

Resources

About