Shoal: A Network Level Moving Target Defense Engine with Software Defined Networking

Wang, Li (2021) Shoal: A Network Level Moving Target Defense Engine with Software Defined Networking. EAI Endorsed Transactions on Security and Safety, 7 (25). e5. ISSN 2032-9393

[img]
Preview
Text
eai.1-6-2021.170011.pdf
Available under License Creative Commons Attribution No Derivatives.

Download (2MB) | Preview

Abstract

Moving Target Defense (MTD) was proposed as a promising defense paradigm to introduce various uncertainties into computer systems, which can greatly raise the bar for the attackers. Currently, there are two classes of MTD research over computer system, system level MTD and network level MTD. System level MTD research introduces uncertainties to various aspects of computer systems; while network level MTD research brings unpredictability of network properties to the target network. A lot of network level MTD research has been proposed, which covers various aspects of computer network. However, the existing MTD approaches usually target on one aspect of computer network, and most of them are designed against a certain network security threat. They can hardly defend against complex attacks or provide complicated protections. In this paper, we propose Shoal, a Moving Target Defense engine with multiple MTD strategies over SDN networks.By applying hybrid and multiple network level MTD methods, Shoal is capable of providing complicated protections and defending advanced attacks. We evaluate Shoal in two advanced protection scenarios, moving target surface and Crossfire attack. The evaluation results, in term of security effectiveness and performance cost, show the protection provided by Shoal’s hybrid MTD methods is effective and the performance cost is relatively low.

Item Type: Article
Uncontrolled Keywords: Moving Target Defense, SDN, security strategy, network security
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
T Technology > T Technology (General)
Depositing User: EAI Editor IV
Date Deposited: 09 Jul 2021 08:33
Last Modified: 09 Jul 2021 08:33
URI: https://eprints.eudl.eu/id/eprint/4412

Actions (login required)

View Item View Item