Mitigating Crossfire Attacks Using SDN-Based Moving Target Defense

Aydeger, Abdullah; Saputro, Nico; Akkaya, Kemal; Rahman, Mahbubur

doi:10.1109/lcn.2016.108

Cited by 53 publications

(57 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Aydeger et al [12] proposed a SDN-based MTD (moving target defense) mechanism to defend against specific types of DDoS attacks called Crossfire. The SDN-based mitigation approach consists to enhance the packet forwarding process in such away routes containing congested links are avoided.…”

Section: Software Defined Networking Based Solutionsmentioning

confidence: 99%

Internet of things security: A top-down survey

2018

View full text Add to dashboard Cite

Internet of Things (IoT) is one of the promising technologies that has attracted a lot of attention in both industrial and academic fields these years. It aims to integrate seamlessly both physical and digital worlds in one single ecosystem that makes up a new intelligent era of Internet. This technology offers a huge business value for organizations and provides opportunities for many existing applications such as energy, healthcare and other sectors. However, as new emergent technology, IoT suffers from several security issues which are most challenging than those from other fields regarding its complex environment and resources-constrained IoT devices. A lot of researches have been initiated in order to provide efficient security solutions in IoT, particularly to address resources constraints and scalability issues. Furthermore, some technologies related to networking and cryptocurrency fields such as Software Defined Networking (SDN) and Blockchain are revolutionizing the world of the Internet of Things thanks to their efficiency and scalability. In this paper, we provide a comprehensive top down survey of the most recent proposed security and privacy solutions in IoT. We discuss particularly the benefits that new approaches such as blockchain and Software Defined Networking can bring to the security and the privacy in IoT in terms of flexibility and scalability. Finally, we give a general classification of existing solutions and comparison based on important parameters.

show abstract

Section: Software Defined Networking Based Solutionsmentioning

confidence: 99%

Internet of things security: A top-down survey

2018

View full text Add to dashboard Cite

show abstract

“…• Reconnaissance (or scanning) attacks: Scanning attacks are used by attackers to gather information and intelligence about a target system before an actual attack is launched. attacks include the use of hidden proxies, IP/port shuffling and/or address mapping [13,34,51,61,82,83,88,93,142,145,158,105]. For example, Meier et al [105] proposed a novel network obfuscation approach and implemented a framework named 'NetHide' which can successfully battle against the possible attacks such as Link-Flooding Attacks (LFAs) launched by even advanced attackers.…”

Section: Attack Typesmentioning

confidence: 99%

“…Compared to the simulation-based studies, results from emulation testbed-based experiments can even provide a higher validity on experimental results although emulationbased studies are not common as much as simulation studies. Aydeger et al [13] proposed an SDN-based route mutation technique to deal with DDoS attacks which are validated via the implementation on the Mininet emulator with a Floodlight SDN controller. Further, Aydeger et al [14] defined a route mutation MTD technique for the Internet Service Provider (ISP) network context through NFV and virtual shadows network aiming to thwart possible DDoS attack.…”

Section: Emulation Model-based Mtd Evaluationmentioning

confidence: 99%

“…An SDN-based packet header randomization is proposed to realize unlinkability anonymity in communications where the SDN controller and OF switches take care of routing based on nonce information [143,156]. Main Attacks: Common attacks considered in SDN-based MTD approaches include reconnaissance (or scanning) attacks [31,66,69,78,79,85,138] and DDoS attacks [13,145], which can be countermeasured by using random IP mutation and/or network topology shuffling. Key Methodologies: The key idea of deploying MTD techniques in SDN environments is to highly leverage its centralized structure with an SDN controller to optimize the configuration of the deployed MTD techniques, such as IP randomization / shuffling [78,79,100,138,145], network routing paths [68], attack graphs / paths [31], port hopping [85], packet header randomization / obfuscation [143,156], or virtual topology generation [1].…”

Section: Software Defined Network (Sdns)mentioning

confidence: 99%

See 1 more Smart Citation

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

Cho

Sharma

Alavizadeh

et al. 2020

IEEE Commun. Surv. Tutorials

221

View full text Add to dashboard Cite

Reactive defense mechanisms, such as intrusion detection systems, have made significant efforts to secure a system or network for the last several decades. However, the nature of reactive security mechanisms has limitations because potential attackers cannot be prevented in advance. We are facing a reality with the proliferation of persistent, advanced, intelligent attacks while defenders are often way behind attackers in taking appropriate actions to thwart potential attackers. The concept of moving target defense (MTD) has emerged as a proactive defense mechanism aiming to prevent attacks. In this work, we conducted a comprehensive, in-depth survey to discuss the following aspects of MTD: key roles, design principles, classifications, common attacks, key methodologies, important algorithms, metrics, evaluation methods, and application domains. We discuss the pros and cons of all aspects of MTD surveyed in this work. Lastly, we highlight insights and lessons learned from this study and suggest future work directions. The aim of this paper is to provide the overall trends of MTD research in terms of critical aspects of defense systems for researchers who seek for developing proactive, adaptive MTD mechanisms.

show abstract

“…Another line of work tries to reduce the quality of information an attacker can retrieve through exploration. In [58], the authors use a centralized approach to obfuscate the network links so that the topology that an attacker can retrieve via crossfire attacks is noisy and unreliable. In this work, each state is a possible path from the source to the destination of the crossfire attack.…”

Section: A What To Switch? ≈ What Actions To Play?mentioning

confidence: 99%

A Survey of Moving Target Defenses for Network Security

Sengupta

Chowdhary

Sabur

et al. 2020

IEEE Commun. Surv. Tutorials

182

View full text Add to dashboard Cite

Network defense techniques based on traditional tools, techniques, and procedures (TTP) fail to account for the attacker's inherent advantage present due to static nature of network services and configurations. Moving Target Defense (MTD), on the other hand, provides an intelligent countermeasure by dynamically re-configuring the underlying systems, thereby reducing the effectiveness of cyber attacks. In this survey, we analyze the recent advancements made in the development of MTD tools, techniques and procedures (TTP) and highlight how these defenses can be made more effective with the use of artificial intelligence techniques for decision making. We first define a unified formal notation for MTDs that can capture different aspects of such defenses. We then categorize these defenses into different sub-classes depending on how they answer the three questions-what to move, when to move and how to moveshowcasing how game theoretic strategies can effectively answer the latter question. To understand the usefulness of these defense methods, we study the implementation of such MTD techniques. We find that (relatively) new networking technologies such as Software Defined Networking (SDN) and Network Function Virtualization (NFV) provide effective means for implementing these dynamic defense methods. To encourage researchers and industry experts in using such defenses, we highlight industry use-cases and discuss the practicality and maturity of these defenses. To aid readers who want to test or deploy MTD techniques, we highlight existing MTD test-beds. Our survey then performs both a qualitative and quantitative analysis to better understand the effectiveness of these MTDs in terms of security and performance. To that extent, we use well-defined metrics such as risk analysis, performance costs for qualitative evaluation and metrics based on Confidentiality, Integrity, Availability (CIA), attack representation, QoS impact, targeted threat models and defense cost for quantitative evaluation. Finally, we conclude by summarizing research opportunities that our survey elucidates.

show abstract

Mitigating Crossfire Attacks Using SDN-Based Moving Target Defense

Cited by 53 publications

References 10 publications

Internet of things security: A top-down survey

Internet of things security: A top-down survey

Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense

A Survey of Moving Target Defenses for Network Security

Contact Info

Product

Resources

About