SCEMA: An SDN-Oriented Cost-Effective Edge-Based MTD Approach

Abstract

Protecting large-scale networks, especially Software-Defined Networks (SDNs), against distributed attacks in a costeffective manner plays a prominent role in cybersecurity. One of the pervasive approaches to plug security holes and prevent vulnerabilities from being exploited is Moving Target Defense (MTD), which can be efficiently implemented in SDN as it needs comprehensive and proactive network monitoring. The critical key in MTD is to shuffle the least number of hosts with an acceptable security impact and keep the shuffling frequency low. In this paper, we have proposed an SDN-oriented Cost-effective Edge-based MTD Approach (SCEMA) to mitigate Distributed Denial of Service (DDoS) attacks at a lower cost by shuffling an optimized set of hosts that have the highest number of connections to the critical servers. These connections are named edges from a graph-theoretical point of view. We have proposed a three-layer mathematical model for the network that can easily calculate the attack cost. We have also designed a system based on SCEMA and simulated it in Mininet. The results show that SCEMA has lower complexity than the previous related MTD field with acceptable performance.

Bipartite Formation Control of Nonlinear Multi-Agent Systems with Fixed and Switching Topologies under Aperiodic DoS Attacks

“…Let the gain α = 5, β = 8, and choose ρ * = 1. Suppose that the time intervals in which aperiodic DoS attacks occur are [20,25], [30,35], [40,45], and [50, 55].…”

“…Select α = 6, β = 10 and ρ * = 0.5. Suppose that the time intervals in which aperiodic DoS attacks occur are [20,25], [30,35], [40,45] under switching topology. Figure 7 shows the trajectories of all agents of the MAS ( 5) and ( 6) with switching topology under DoS attacks.…”

“…The works mentioned above were acquired in a secure information transmission environment, which is unrealistic because communication networks may suffer from complex malicious attacks [34,35]. For example, denial of service (DoS) is a class of typical internet attacks and has received significant attention in recent studies for multi-agent systems.…”

P²SPA: Privacy Preservation Strategy With Pseudo-Addresses for Edge Computing Networks

“…This proactive approach aims to thwart attacks by constantly changing their surface. The rapid evolution of network communication technology has expanded the potential applica-tions of MTD [18]. Research on MTD has primarily focused on two categories: Software-Defined Networks (SDN) and virtual IP address technology [19].…”

Implementation of a Lossless Moving Target Defense Mechanism

“…Since IP address mutation is completely transparent to protocols using IP protocol services, it avoids connection interruption or data loss. In the proposed solution, Software-Defined Network (SDN) is utilized [10][11][12]. However, the characteristics of SDN networks alone do not address the issue of of maintaining TCP connections.…”