Network moving target defense technique based on optimal forwarding path migration

Autor: Cheng LEI, Duo-he MA, Hong-qi ZHANG, Qi HAN, Ying-jie YANG
Jazyk: čínština
Rok vydání: 2017
Předmět:
Zdroj: Tongxin xuebao, Vol 38, Pp 133-143 (2017)
Druh dokumentu: article
ISSN: 1000-436X
DOI: 10.11959/j.issn.1000-436x.2017056
Popis: Moving target defense is a revolutionary technology which changes the situation of attack and defense.How to effectively achieve forwarding path mutation is one of the hotspot in this field.Since existing mechanisms are blindness and lack of constraints in the process of mutation,it is hard to maximize mutation defense benefit under the condition of good network quality of services.A novel of network moving target defense technique based on optimal forwarding path migration was proposed.Satisfiability modulo theory was adopted to formally describe the mutation constraints,so as to prevent transient problem.Optimization combination between routing path and mutation period was chosen by using optimal routing path generation method based on security capacity matrix so as to maximum defense benefit.Theoretical and experimental analysis show the defense cost and benefit in resisting passive sniffing attacks.The capability of achieving maximum defense benefit under the condition of ensuring network quality of service is proved.
Databáze: Directory of Open Access Journals