SDI defense against DDoS attacks based on IP Fast Hopping method

Krylov, Vladimir; Kravtsov, Kirill; Sokolova, E.S.; Lyakhmanov, D A

doi:10.1109/monetec.2014.6995589

Cited by 7 publications

(5 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, the defense system requires sufficient address space, which is an additional overhead of defense. Krylov et al [15] proposed a method countermeasure of DDoS attack called IP Fast Hopping, which is an implementable network layer software solution. is method also lacks the necessary perception of attack behavior and cannot adapt to the change of different attack behavior.…”

Section: Related Workmentioning

confidence: 99%

“…Existing researches [4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22] have proved that IP hopping technology is an effective method to defend against scanning attack which is normally the first step of many other network attacks such as DDoS [23] and propagation worm [24]. e game between scanning attacker and IP hopping defender is shown in Figure 1.…”

Section: Introductionmentioning

confidence: 99%

“…Meanwhile, SDN also faces endless network threats. IP hopping technology applied to SDN has also been researched in many papers [11][12][13][14][15][16][17][18][19][20]. ey usually use OpenFlow [26,27] to develop a MTD architecture for IP hopping defense.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Adaptive IP Hopping Approach for Moving Target Defense Using a Light-Weight CNN Detector

Liu

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

Scanning attack is normally the first step of many other network attacks such as DDoS and propagation worm. Because of easy implementation and high returns, scanning attack especially cooperative scanning attack is widely used by hackers, which has become a serious threat to network security. In order to defend against scanning attack, this paper proposes an adaptive IP hopping in software defined network for moving target defense (MTD). In order to accurately respond to attacker’s behavior in real time, a light-weight convolutional neural network (CNN) detector composed of three convolutional modules and a judgment module is proposed to sense scanning attack. Input data of the detector is generated via designed packets sampling and data preprocess. The detection result of the detector is used to trigger IP hopping. In order to provide some fault tolerance for the CNN detector, IP hopping can also be triggered by a preset timer. The CNN driving adaptability is applied to a three-level hopping strategy to make the MTD system optimize its behavior according to real time attack. Experiments show that compared with existing technologies, our proposed method can significantly improve the defense effect to mitigate scanning attack and its subsequent attacks which are based on hit list. Hopping frequency of the proposed method is also lower than that of other methods, so the proposed method shows lower system overhead.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

An Adaptive IP Hopping Approach for Moving Target Defense Using a Light-Weight CNN Detector

Liu

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Most MTD anti-intrusion and anti-intrusion technologies based on reorganization mainly focus on IP reorganization. According to the different ways of IP reorganization, it can be divided into three methods: hidden device IP [ 15 , 16 ], device IP redistribution [ 17 , 18 , 19 ], virtual IP and device IP hopping [ 20 , 21 , 22 , 23 ]. To hide the device IP is to pack or modify the device IP in various ways.…”

Section: Related Workmentioning

confidence: 99%

A Two-Layer IP Hopping-Based Moving Target Defense Approach to Enhancing the Security of Mobile Ad-Hoc Networks

Wang

Zhou

Ding

2021

Sensors

View full text Add to dashboard Cite

Mobile ad-hoc networks (MANETs) have great potential applications in military missions or emergency rescue due to their no-infrastructure, self-organizing and multi hop capability characteristics. Obviously, it is important to implement a low-cost and efficient mechanism of anti-invasion, anti-eavesdropping and anti-attack in MANETs, especially for military scenarios. The purpose of intruding or attacking a MANET is usually different from that of wired Internet networks whose security mechanism has been widely explored and implemented. For MANETs, moving target defense (MTD) is a suitable mechanism to enhance the network security, whose basic idea is to continuously and randomly change the system parameters or configuration to create inaccessibility for intruders and attackers. In this paper, a two-layer IP hopping-based MTD approach is proposed, in which device IP addresses or virtual IP addresses change or hop according to the network security status and requirements. The proposed MTD scheme based on the two-layer IP hopping has two major advantages in terms of network security. First, the device IP address of each device is not exposed to the wireless physical channel at all. Second, the two-layer IP hops with individual interval and rules to obtain enhanced security of MANET while maintaining relatively low computational load and communication cost for network control and synchronization. The proposed MTD scheme is implemented in our developed MANET terminals, providing three level of network security: anti-intrusion in normal environment, intrusion detection in offensive environment and anti-eavesdropping in a hostile environment by combining the data encryption technology.

show abstract

“…IP Fast Hopping is a DDoS prevention mechanism, where the IP of the protected server is changing according to a schedule just like frequency hopping [28]. In this technique, when the clients request a particular server using a hostname, they are…”

Section: Research Processmentioning

confidence: 99%

Mitigating Security Problems in Virtualized Networks Through Resource Management

Sattar¹

View full text Add to dashboard Cite

SDI defense against DDoS attacks based on IP Fast Hopping method

Cited by 7 publications

References 5 publications

An Adaptive IP Hopping Approach for Moving Target Defense Using a Light-Weight CNN Detector

An Adaptive IP Hopping Approach for Moving Target Defense Using a Light-Weight CNN Detector

A Two-Layer IP Hopping-Based Moving Target Defense Approach to Enhancing the Security of Mobile Ad-Hoc Networks

Mitigating Security Problems in Virtualized Networks Through Resource Management

Contact Info

Product

Resources

About