Sage Journals: Discover world-class research

Abstract

In this paper, a spatial adaptive strategy for End-hopping systems is proposed, based on the study of attack–defense models. It has been conceived as a combination of adaptive and End-hopping technologies. Modules such as attack detection, feedback transmission and adaptive control are added to the original End-hopping system model. Then, guidance is put forward for next hop with the help of real-time evaluation on each hopping node. Furthermore, investigations are provided on how to adjust related parameters automatically, according to the network communication status and the degree according to which the nodes are attacked. The new system can maintain good service efficiency as well as high security. This technique is applied to the End-hopping prototype system. By presenting different attack experiments on a prototype system, the feasibility and effectiveness of such End-hopping technique are shown.

Keywords

Network security End-hopping spatial adaptive strategy

Get full access to this article

View all access options for this article.

References

[1]

Al-Shaer, Toward network configuration randomization for moving target defense, in: Moving Target Defense, Vol. 54, 2011.

[2]

Almgren,

Fuet al., Mapping systems security research at Chalmers, in: Proceedings of the 1st SysSec Workshop (SysSec), 2011.

[3]

Badishi,

Herzberget al., Keeping denial-of-service attackers in the dark, IEEE Transactions on Dependable and Secure Computing4(3) (2007), 191–204.

[4]

Badishi,

Herzberget al., An empirical study of denial of service mitigation techniques, in: Symposium on Reliable Distributed Systems (SRDS’08), IEEE, 2008.

[5]

Fu, Mitigating distributed denial-of-service attacks: Application–defense and network–defense methods, Chalmers University of Technology and Göteborg University, 2010.

[6]

J.H.

Jafarian,

Al-Shaeret al., Openflow random host mutation: Transparent moving target defense using software defined networking, in: Proceedings of the 1st Workshop on Hot Topics in Software Defined Networks, ACM, 2012.

[7]

Jia,

Linet al., Plug-in policy for DoS attack defense mechanism based on End-hopping, Journal on Communications30(10A) (2009), S1.

[8]

H.C.J.

Lee and

V.L.L.

Thing, Port hopping for resilient networks, in: 60th Vehicular Technology Conference on VTC2004-Fall, IEEE, 2004.

[9]

D.W.

McDaniel, Address hopping of packet-based communications, Google Patents, 2006.

10.

[10]

E.C.

Munger,

D.C.

Schmidt et al., Preventing packet flooding of a computer on a computer network, Google Patents, 2004.

11.

[11]

Sifalakis,

Schmidet al., Network address hopping: A mechanism to enhance data protection for packet communications, in: Proceedings of IEEE International Conference on Communications (ICC 2005), 2005.

12.

[12]

Wendzel and

Keller, Design and implementation of an active warden addressing protocol switching covert channels, in: Proceedings of the 7th International Conference on Internet Monitoring and Protection (ICIMP 2012), 2012.

13.

[13]

Wendzel and

Zander, Detecting protocol switching covert channels, in: 2012 IEEE 37th Conference on Local Computer Networks (LCN), 2012.

14.

[14]

Xu,

Pan et al., System and method to detect and mitigate distributed denial of service attacks using random Internet protocol hopping, Google Patents, 2010.

15.

[15]

Zhao and

Jia, Research on spatial adaptive strategy of End-hopping system, in: 2013 Fourth International Conference on Emerging Intelligent Data and Web Technologies (EIDWT), IEEE, 2013.

Research and analysis on spatial adaptive strategy of End-hopping system

Abstract

Keywords

Get full access to this article

References