A Novel Efficient Address Mutation Scheme for IPv6 Networks

Shen, Yan; Huang, Xiaotao; Zhang, Pei; Ma, Yan

doi:10.1109/access.2016.2636907

Cited by 14 publications

(5 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…NAS is the technology used to prevent a reconnaissance act by moving the network address. [18]. It defines the network address as the attack surface [19].…”

Section: B Moving Target Defense and Network Address Shufflingmentioning

confidence: 99%

“…Most NAS technologies allow MTD controller to decide when to shuffle the network address but the host itself can assume the role of the MTD controller if the one-time address is used. However, in a general ICT environment, changing the network address of the host to a highest frequency may cause severe performance degradation [18]. Hence, most NAS schemes use a periodic (using low frequency) shuffling mode with a non-periodic shuffling mode.…”

Section: B Moving Target Defense and Network Address Shufflingmentioning

confidence: 99%

See 1 more Smart Citation

CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN

Woo¹,

Moon²,

Youn³

et al. 2019

IEEE Access

View full text Add to dashboard Cite

New vehicles have become increasingly targeted for cyber-attacks as their rate of digitalization is accelerated. Research on vehicle hacking has highlighted the security vulnerabilities of in-vehicle controller area networks (CANs) as the biggest problem. In particular, a CAN does not offer access control, authentication, or confidentiality, so it fails to prevent reconnaissance operations conducted by an adversary. Because its static configuration (CAN ID, data frame transmission cycle, and data field format) is used in an in-vehicle network environment, the adversary can conduct reconnaissance and easily acquire information to be used for an attack. One of the moving target defense strategies, network address shuffling (NAS), is an extremely practical security solution that can prevent in-vehicle CAN reconnaissance acts. In this paper, we propose a CAN ID shuffling technique using NAS. Our proposed security solution aims to increase the cost burden for the adversary to analyze CAN data frames. To evaluate the performance of the proposed security solution, we conducted an evaluation based on a labcar. Our proposed security solution may be implemented without altering the unique characteristics of the CAN standard. Hence, it can be used as a practical countermeasure to solve the problems affecting in-vehicle CANs. INDEX TERMS Controller area network, in-vehicle network security, moving target defense, network address shuffling, vehicular cyber kill chain.

show abstract

“…NAS is the technology used to prevent a reconnaissance act by moving the network address. [18]. It defines the network address as the attack surface [19].…”

Section: B Moving Target Defense and Network Address Shufflingmentioning

confidence: 99%

Section: B Moving Target Defense and Network Address Shufflingmentioning

confidence: 99%

CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN

Woo¹,

Moon²,

Youn³

et al. 2019

IEEE Access

View full text Add to dashboard Cite

show abstract

“…However, during the RSU's IP hopping, if the RSU's IP hopping period is too long, the attacker will have the sufficient time to detect and obtain the current RSU's IP hopping rules, and then launch follow-up attacks on the target RSU, which reduces the IP hopping effectiveness. If the RSU's IP hopping period is too short, the high-frequency IP hopping will reduce the reliability of data transmission [30], while increasing the hopping overheads. It is a valuable problem to choose an appropriate IP hopping frequency to maximize the defender's defense benefits and reduce the hopping overheads.…”

Section: Figure 2 the General Process Of Ip Hopping-based Defense Mementioning

confidence: 99%

The Intelligent Offense and Defense Mechanism of Internet of Vehicles Based on the Differential Game-IP Hopping

et al. 2020

View full text Add to dashboard Cite

The Road Side Unit (RSU) is an important part of the Internet of Vehicles (IoV), which collects a large number of user's privacy information and connects vehicles to the Internet. The current RSU is running with static configurations, and the adversary can get enough time to analyze the vulnerability of the RSU and launch attacks, which poses a huge threat to the privacy security of the IoV. Under this asymmetrical condition, the attackers occupy a predominant position, and it is difficult to fully defend. To solve the above asymmetry offense-defense problem, we adopt the moving target defense (MTD) to dynamically change the IP address of the RSU, which increases the difficulty of the attacker's attack. However, due to the unreasonable selection of the RSU's IP hopping frequency, it is difficult for the RSU's IP hopping to exert its defense effect or it may introduce excessive defense overheads. Given the above issue, we propose an intelligent offense and defense mechanism based on a differential game approach, which can adaptively adjust the RSU's IP hopping frequency and maximize its defense benefits. First, based on the offense and defense relationship, we model the RSU's IP hopping frequency intelligent arrangement as a differential game (i.e., IP hopping game) in which the attacker attempts to maximize his potential benefits, and the RSU manages to maximize its defense benefits. On this basis, we calculate a potential Nash equilibrium of the IP hopping game. Finally, simulation results show our proposed mechanism can adaptively adjust the RSU's IP hopping frequency according to the attack frequency and effectively defend attacks. Compared with the mechanisms with a fixed IP hopping frequency, our proposed mechanism can make up for the ineffectiveness of the fixed low-frequency IP hopping defense and avoid the excessive defense overheads of the fixed high-frequency IP hopping defense. INDEX TERMS Internet of vehicles, privacy security, moving target defense, IP hopping, a differential game.

show abstract

“…Reducing the handover and mobility management delays in mobile networks have been researched by different proposals. Most of these proposals suggested modification either in hardware such as access points or software like protocols [19]. To review the related works, we focused on the papers and articles that were proposed the separation of IPv6 address into locator and identifier concept and binding this concept with SDN to present our idea.…”

Section: B Related Workmentioning

confidence: 99%

Smart Virtualization Packets Forwarding During Handover for Beyond 5G Networks

Yaseen

Al-Raweshidy

2019

IEEE Access

View full text Add to dashboard Cite

Keeping a connection continuity during the movement of a mobile node (MN) between access points without any suspension of provided services is one of the most pressing issues should be solved. Long handover processing causes interruptions in session connection, high rate of data loss, and long end-to-end delay time. Smart virtualization means the cooperation of different virtualization technologies with novel ideas. In this paper, we proposed a mobile network architecture compatible with cloud computing of 5G and beyond networks. We invented a new idea to create a tag to be used as an MN's identity, which consists of the standard E.164 numbering and MAC address. Based on the uniqueness of E.164 numbering and MAC which are processed together to generate the MN tag (T H ). T H is used to handle the packets inside the mobile networks. The software-defined networking (SDN) provides a capability of separating the control plane from the data plane. This decoupling is a suitable candidate to exploit it in our proposed system that uses the SDN and other virtualization technologies. The requirements of the 5G and beyond for future mobile communications encouraged us to think in a novel packet forwarding during the handover to keep real-time connection continuity for an MN. Our proposed system has been simulated and performed by MATLAB and Mininet platforms. The results showed that the packet loss rate decreased to 4% of the date that was lost during the handover delay time or packets re-direction mechanism. At the same time, the MN could receive 96.4% of the data that were lost during the handover process.INDEX TERMS 5G, control plane, communication networks, SDN, NFV.

show abstract

A Novel Efficient Address Mutation Scheme for IPv6 Networks

Cited by 14 publications

References 19 publications

CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN

CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN

The Intelligent Offense and Defense Mechanism of Internet of Vehicles Based on the Differential Game-IP Hopping

Smart Virtualization Packets Forwarding During Handover for Beyond 5G Networks

Contact Info

Product

Resources

About