KJCKorea
Journal Central

@article{ART002277300},
author={Koohong Kang and Tae-Keun Park and Daesung Moon},
title={Analysis of Threat Model and Requirements in Network-based Moving Target Defense},
journal={Journal of The Korea Society of Computer and Information},
issn={1598-849X},
year={2017},
volume={22},
number={10},
pages={83-92},
doi={10.9708/jksci.2017.22.10.083}

TY - JOUR
AU - Koohong Kang
AU - Tae-Keun Park
AU - Daesung Moon
TI - Analysis of Threat Model and Requirements in Network-based Moving Target Defense
JO - Journal of The Korea Society of Computer and Information
PY - 2017
VL - 22
IS - 10
PB - The Korean Society Of Computer And Information
SP - 83
EP - 92
SN - 1598-849X
AB - Reconnaissance is performed gathering information from a series of scanning probes where the objective is to identify attributes of target hosts. Network reconnaissance of IP addresses and ports is prerequisite to various cyber attacks. In order to increase the attacker’s workload and to break the attack kill chain, a few proactive techniques based on the network-based moving target defense (NMTD) paradigm, referred to as IP address mutation/randomization, have been presented. However, there are no commercial or trial systems deployed in real networks. In this paper, we propose a threat model and the request for requirements for developing NMTD techniques. For this purpose, we first examine the challenging problems in the NMTD mechanisms that were proposed for the legacy TCP/IP network. Secondly, we present a threat model in terms of attacker’s intelligence, the intended information scope, and the attacker’s location. Lastly, we provide seven basic requirements to develop an NMTD mechanism for the legacy TCP/IP network: 1) end-host address mutation, 2) post tracking, 3) address mutation unit, 4) service transparency, 5) name and address access, 6) adaptive defense, and 7) controller operation. We believe that this paper gives some insight into how to design and implement a new NMTD mechanism that would be deployable in real network.
KW - Moving target defense;Network address mutation;Internet security
DO - 10.9708/jksci.2017.22.10.083
ER -

Koohong Kang, Tae-Keun Park and Daesung Moon. (2017). Analysis of Threat Model and Requirements in Network-based Moving Target Defense. Journal of The Korea Society of Computer and Information, 22(10), 83-92.

Koohong Kang, Tae-Keun Park and Daesung Moon. 2017, "Analysis of Threat Model and Requirements in Network-based Moving Target Defense", Journal of The Korea Society of Computer and Information, vol.22, no.10 pp.83-92. Available from: doi:10.9708/jksci.2017.22.10.083

Koohong Kang, Tae-Keun Park, Daesung Moon "Analysis of Threat Model and Requirements in Network-based Moving Target Defense" Journal of The Korea Society of Computer and Information 22.10 pp.83-92 (2017) : 83.

Koohong Kang, Tae-Keun Park, Daesung Moon. Analysis of Threat Model and Requirements in Network-based Moving Target Defense. 2017; 22(10), 83-92. Available from: doi:10.9708/jksci.2017.22.10.083

Koohong Kang, Tae-Keun Park and Daesung Moon. "Analysis of Threat Model and Requirements in Network-based Moving Target Defense" Journal of The Korea Society of Computer and Information 22, no.10 (2017) : 83-92.doi: 10.9708/jksci.2017.22.10.083

Koohong Kang; Tae-Keun Park; Daesung Moon. Analysis of Threat Model and Requirements in Network-based Moving Target Defense. Journal of The Korea Society of Computer and Information, 22(10), 83-92. doi: 10.9708/jksci.2017.22.10.083

Koohong Kang; Tae-Keun Park; Daesung Moon. Analysis of Threat Model and Requirements in Network-based Moving Target Defense. Journal of The Korea Society of Computer and Information. 2017; 22(10) 83-92. doi: 10.9708/jksci.2017.22.10.083

Koohong Kang, Tae-Keun Park, Daesung Moon. Analysis of Threat Model and Requirements in Network-based Moving Target Defense. 2017; 22(10), 83-92. Available from: doi:10.9708/jksci.2017.22.10.083

Koohong Kang, Tae-Keun Park and Daesung Moon. "Analysis of Threat Model and Requirements in Network-based Moving Target Defense" Journal of The Korea Society of Computer and Information 22, no.10 (2017) : 83-92.doi: 10.9708/jksci.2017.22.10.083