A Two-Layer IP Hopping-Based Moving Target Defense Approach to Enhancing the Security of Mobile Ad-Hoc Networks

Abstract

Mobile ad-hoc networks (MANETs) have great potential applications in military missions or emergency rescue due to their no-infrastructure, self-organizing and multi hop capability characteristics. Obviously, it is important to implement a low-cost and efficient mechanism of anti-invasion, anti-eavesdropping and anti-attack in MANETs, especially for military scenarios. The purpose of intruding or attacking a MANET is usually different from that of wired Internet networks whose security mechanism has been widely explored and implemented. For MANETs, moving target defense (MTD) is a suitable mechanism to enhance the network security, whose basic idea is to continuously and randomly change the system parameters or configuration to create inaccessibility for intruders and attackers. In this paper, a two-layer IP hopping-based MTD approach is proposed, in which device IP addresses or virtual IP addresses change or hop according to the network security status and requirements. The proposed MTD scheme based on the two-layer IP hopping has two major advantages in terms of network security. First, the device IP address of each device is not exposed to the wireless physical channel at all. Second, the two-layer IP hops with individual interval and rules to obtain enhanced security of MANET while maintaining relatively low computational load and communication cost for network control and synchronization. The proposed MTD scheme is implemented in our developed MANET terminals, providing three level of network security: anti-intrusion in normal environment, intrusion detection in offensive environment and anti-eavesdropping in a hostile environment by combining the data encryption technology.

Introducing randomness into univariate control chart sampling strategies for enhancing security against cyber‐physical attacks in production systems

“…As examples, it has been proposed to randomly simulate network node downtimes to improve network stability 27 ; while changing a network's configuration randomly, by dynamically altering associated IP addresses, enhances its security. 28 Before investigating the performance of intentionally introducing random sampling plans for control charting, it is important to first understand the sampling plans that are commonly employed in practice to establish a performance baseline. This work considers processes that manufactures products at a constant rate, where 𝑀𝑃 𝑖 is the 𝑖 𝑡ℎ Manufactured Product.…”

“…In addition, the approach of deliberately introducing randomness has been frequently applied in the field of Information Technology (IT) to ensure process stability and security. As examples, it has been proposed to randomly simulate network node downtimes to improve network stability 27 ; while changing a network's configuration randomly, by dynamically altering associated IP addresses, enhances its security 28 …”

A Comprehensive Architectural Framework of Moving Target Defenses Against DDoS Attacks

“…In [19], the authors proposed a technique called Random Host Mutation (RHM), where hosts are assigned virtual IP addresses that are changed randomly and synchronously over time. Similar approaches were proposed for different areas such as cloud computing platforms [26], IoT [27], Mobile Ad Hoc Networks (MANETs) [28], and network-level applications. Port numbers are logical addresses that are used to deliver packets to the corresponding protocol.…”

Industrial Internet of Things Anti-Intrusion Detection System by Neural Network in the Context of Internet of Things for Privacy Law Security Protection

“…The working principle is to collect and analyze data information in the network 5 Wireless Communications and Mobile Computing to extract offensive details and behaviors to determine whether the data has intrusions. Unauthorized or abnormal access behavior in the network is judged [27].…”