Home > Explore Content > All Issues > Article View
Design of a Protected Server Network with Decoys for Network-based Moving Target Defense
Journal of The Korea Society of Computer and Information
Abbr :
JKSCI
2018, 23(9), pp.57-64
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
2018, 23(9), pp.57-64
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
-
In recent years, a new approach to cyber security, called the moving target defense, has emerged as a potential solution to the challenge of static systems. In this paper, we design a protected server network with a large number of decoys to anonymize the protected servers that dynamically mutate their IP address and port numbers according to Hidden Tunnel Networking, which is a network-based moving target defense scheme. In the network, a protected server is one-to-one mapped to a decoy-bed that generates a number of decoys, and the decoys share the same IP address pool with the protected server. First, the protected server network supports mutating the IP address and port numbers of the protected server very frequently regardless of the number of decoys. Second, it provides independence of the decoy-bed configuration. Third, it allows the protected servers to freely change their IP address pool. Lastly, it can reduce the possibility that an attacker will reuse the discovered attributes of a protected server in previous scanning. We believe that applying Hidden Tunnel Networking to protected servers in the proposed network can significantly reduce the probability of the protected servers being identified and compromised by attackers through deploying a large number of decoys.
111 Viewed
Print this page
Download PDF