Changing the Game: A Micro Moving Target IPv6 Defense for the Internet of Things

Zeitz, Kimberly; Cantrell, Michael; Marchany, Randy; Tront, Joseph G.

doi:10.1109/lwc.2018.2797916

Cited by 21 publications

(6 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Another proposed MTD strategy focused on randomizing IP addresses in IoT devices was presented by Zeitz et al in [16]. This strategy explores the use of Micro Moving Target IPv6 Defense (µMT6D).…”

Section: A Mtd Strategies For Iotmentioning

confidence: 99%

“…According to the authors, the presented strategy successfully prevents denial-of-service attacks or eavesdropping passive attacks, among others. The authors in [16] evaluated the performance of the system when the strategy is running and compared the results obtained with the evaluation of the system when the MTD strategy is not running. The evaluation of the MTD strategy with respect to system performance was carried out through simulation using virtualization of operating systems widely used in IoT applications such as Contiki.…”

Section: A Mtd Strategies For Iotmentioning

confidence: 99%

See 1 more Smart Citation

A Moving Target Defense Strategy for Internet of Things Cybersecurity

2021

View full text Add to dashboard Cite

Internet of Things (IoT) systems are becoming more common and present in our daily lives. The increase of Internet-connected devices has caused attackers to focus more their attention on these devices, and therefore, new and more sophisticated attacks to IoT systems are discovered every day. Currently, to ensure reliability and operability, most IoT systems are designed to operate in a relatively static configuration, among a highly heterogeneous environment. However, a system that does not continuously change its configurations, i.e., a static system, gives an advantage to attackers; with enough time and resources, an attacker will eventually find and exploit the vulnerabilities of any static target. This work proposes a Moving Target Defense (MTD) strategy that randomly shuffles the communication protocols through which a node communicates to a gateway in an IoT network. The system's configuration changes have an associated cost. The objective of the proposed MTD strategy in this work is to maintain a balance between the increase in system performance overhead, the increase in business impact (system unavailability) and, at the same time, the decrease in the probability of success of a given attack. To design this strategy, a framework has been proposed, this framework can be used to design any MTD strategy for IoT systems. The objective of the framework is to find, after several iterations, the MTD strategy parameters that achieve a balance between five different measurable variables of an IoT system.

show abstract

Section: A Mtd Strategies For Iotmentioning

confidence: 99%

Section: A Mtd Strategies For Iotmentioning

confidence: 99%

A Moving Target Defense Strategy for Internet of Things Cybersecurity

2021

View full text Add to dashboard Cite

show abstract

“…In addition, for use when implementing MTD mechanisms via route mutation, Aydeger et al [10] proposed various virtual shadow networks created through network functions virtualization (NFV), which can dynamically change the routes for specific reconnaissance packets so that attackers will not be able to easily identify the actual network topologies. Zeitz et al [11] explored the uses of a micromoving target IPv6 defense (µMT6D). e μMT6D is designed to work on low-power and low-resource devices and can prevent targeted attacks through rotating the IPv6 address.…”

Section: Related Workmentioning

confidence: 99%

Mimic Encryption Box for Network Multimedia Data Security

Zhou

et al. 2020

Security and Communication Networks

View full text Add to dashboard Cite

With the rapid development of the Internet, the security of network multimedia data has attracted increasingly more attention. The moving target defense (MTD) and cyber mimic defense (CMD) approaches provide a new way to solve this problem. To enhance the security of network multimedia data, this paper proposes a mimic encryption box for network multimedia data security. The mimic encryption box can directly access the network where the multimedia device is located, automatically complete the negotiation, provide safe and convenient encryption services, and effectively prevent network attacks. According to the principles of dynamization, diversification, and randomization, the mimic encryption box uses a reconfigurable encryption algorithm to encrypt network data and uses IP address hopping, port number hopping, protocol camouflage, and network channel change to increase the attack threshold. Second, the mimic encryption box has a built-in pseudorandom number generator and key management system, which can generate an initial random key and update the key with the hash value of the data packet to achieve “one packet, one key.” Finally, through the cooperation of the ARM and the FPGA, an access control list can be used to filter illegal data and monitor the working status of the system in real time. If an abnormality is found, the feedback reconstruction mechanism is used to “clean” the FPGA to make it work normally again. The experimental results and analysis show that the mimic encryption box designed in this paper has high network encryption performance and can effectively prevent data leakage. At the same time, it provides a mimic security defense mechanism at multiple levels, which can effectively resist a variety of network attacks and has high security.

show abstract

“…• We consider a new metric, packet delivery ratio, to measure the service availability in the presence of attacks. • We conduct a comparative performance analysis for 12 schemes resulting from a combination of four "when-toshuffle" triggering strategies and three "how-to-shuffle" strategies. We add a new section to analyze the effects of key parameters, including attack intelligence, attack severity, and decoy/real node population, on system performance.…”

Section: Research Goal and Contributionsmentioning

confidence: 99%

“…[10] and [12] developed micro MTD IPv6 as a solution to provide privacy and defense services to resource constrained devices. This work limited the time available to an attacker performing reconnaissance attacks and provided power consumption analysis to prove the efficacy of their micro MTD mechanism.…”

Section: Mtd and Defensive Deception Techniques For Iotmentioning

confidence: 99%

Proactive Defense for Internet-of-Things: Integrating Moving Target Defense with Cyberdeception

Ge,

Cho,

Kim

et al. 2020

Preprint

View full text Add to dashboard Cite

Resource constrained Internet-of-Things (IoT) devices are highly likely to be compromised by attackers because strong security protections may not be suitable to be deployed. This requires an alternative approach to protect vulnerable components in IoT networks. In this paper, we propose an integrated defense technique to achieve intrusion prevention by leveraging cyberdeception (i.e., a decoy system) and moving target defense (i.e., network topology shuffling). We verify the effectiveness and efficiency of our proposed technique analytically based on a graphical security model in a software defined networking (SDN)based IoT network. We develop four strategies (i.e., fixed/random and adaptive/hybrid) to address "when" to perform network topology shuffling and three strategies (i.e., genetic algorithm/decoy attack pathbased optimization/random) to address "how" to perform network topology shuffling on a decoy-populated IoT network, and analyze which strategy can best achieve a system goal such as prolonging the system lifetime, maximizing deception effectiveness, maximizing service availability, or minimizing defense cost. Our results demonstrate that a software defined IoT network running our intrusion prevention technique at the optimal parameter setting prolongs system lifetime, increases attack complexity of compromising critical nodes, and maintains superior service availability compared with a counterpart IoT network without running our intrusion prevention technique. Further, when given a single goal or a multi-objective goal (e.g., maximizing the system lifetime and service availability while minimizing the defense cost) as input, the best combination of "when" and "how" strategies is identified for executing our proposed technique under which the specified goal can be best achieved.

show abstract

Changing the Game: A Micro Moving Target IPv6 Defense for the Internet of Things

Cited by 21 publications

References 20 publications

A Moving Target Defense Strategy for Internet of Things Cybersecurity

A Moving Target Defense Strategy for Internet of Things Cybersecurity

Mimic Encryption Box for Network Multimedia Data Security

Proactive Defense for Internet-of-Things: Integrating Moving Target Defense with Cyberdeception

Contact Info

Product

Resources

About