Abstract:The contemporary world, dominated by information technologt (IT), necessitates sophisticated protection mechanisms against attacks that pose significant threats to individuals, companies, and governments alike. The unpredictability of human behavior, coupled with the scattered development of applications and devices, complicates supply chain maintenance, making it impossible to develop a system entirely immune to cyberattacks. Effective execution of many attack types hinges on prior network reconnaissance. Thus, hindering effective reconnaissance serves as a countermeasure to attacks. This paper introduces a solution within the moving target defense (MTD) strategies, focusing on the mutation of Internet protocol (IP) addresses in both edge and core network switches. The idea of complicating reconnaissance by continually changing IP addresses has been suggested in numerous studies. Nonetheless, previously proposed solutions have adversely impacted the quality of service (QoS) levels. Implementing these mechanisms could interrupt Transmission Control Protocol (TCP) connections and result in data losses. The IP address mutation algorithms presented in this study were designed to be fully transparent to transport layer protocols, thereby preserving the QoS for users without degradation. In this study, we leveraged the benefits of software-defined networking (SDN) and the Programming-Protocol-Ondependent Packet Processors (P4) language, which specifies packet processing methodologies in the data plane. Employing both SDN and P4 enables a dynamic customization of network device functionalities to meet network users' specific requirements, a feat unachievable with conventional computer networks. This approach not only enhances the adaptability of network configurations but also significantly increases the efficiency and effectiveness of network management and operation.

Defeating Internet attacks and Spam using "disposable" Mobile IPv6 home addresses

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Defending Wireless Networks from Radio Interference Attacks

Channel Surfing and Spatial Retreats

Multi-variant Network Address Hopping to Defend Stealthy Crossfire Attack

Access path based source address validation in mobile IPv6

Addressless: A New Internet Server Model to Prevent Network Scanning

Addressless: Enhancing IoT Server Security Using IPv6

Mitigating DDoS Attacks Using Protection Nodes in Mobile Ad Hoc Networks.

A New Worm Exploiting IPv6 and IPv4-IPv6 Dual-Stack Networks: Experiment, Modeling, Simulation, and Defense

A Sms-Based Mobile Botnet Using Flooding Algorithm

An Authentication Based Source Address Spoofing Prevention Method Deployed in IPv6 Edge Network

Mobile Jamming Attack and Its Countermeasure in Wireless Sensor Networks.

Implementation of a Lossless Moving Target Defense Mechanism

A Multi-Faceted Approach Towards Spam-Resistible Mail

Novel Mechanism to Defend DDoS Attacks Caused by Spam

Eliminating Rouge Femtocells Based on Distance Bounding Protocol and Geographic Information

Research on DDoS Attacks in IPv6.

Botnet Command and Control Based on Short Message Service and Human Mobility

Preventing Wormhole Attacks in Mobile Commerce

Fast IPv6 Network Periphery Discovery and Security Implications