Abstract:The contemporary world, dominated by information technologt (IT), necessitates sophisticated protection mechanisms against attacks that pose significant threats to individuals, companies, and governments alike. The unpredictability of human behavior, coupled with the scattered development of applications and devices, complicates supply chain maintenance, making it impossible to develop a system entirely immune to cyberattacks. Effective execution of many attack types hinges on prior network reconnaissance. Thus, hindering effective reconnaissance serves as a countermeasure to attacks. This paper introduces a solution within the moving target defense (MTD) strategies, focusing on the mutation of Internet protocol (IP) addresses in both edge and core network switches. The idea of complicating reconnaissance by continually changing IP addresses has been suggested in numerous studies. Nonetheless, previously proposed solutions have adversely impacted the quality of service (QoS) levels. Implementing these mechanisms could interrupt Transmission Control Protocol (TCP) connections and result in data losses. The IP address mutation algorithms presented in this study were designed to be fully transparent to transport layer protocols, thereby preserving the QoS for users without degradation. In this study, we leveraged the benefits of software-defined networking (SDN) and the Programming-Protocol-Ondependent Packet Processors (P4) language, which specifies packet processing methodologies in the data plane. Employing both SDN and P4 enables a dynamic customization of network device functionalities to meet network users' specific requirements, a feat unachievable with conventional computer networks. This approach not only enhances the adaptability of network configurations but also significantly increases the efficiency and effectiveness of network management and operation.

Real-time Replacement of Network Data Packets Based on TCP and Its Defense Measures

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Port Scanning Techniques and Analysis of Attack and Defense

Instant Recovery--a New Recovery Algorithm for TCP Congestion Control

A Defense Strategy Against RoQ Attacks Based on Dynamic Packets Filtering

A Real-Time TCP Stream Reassembly Mechanism in High-Speed Network

Network Moving Target Defense Technique Based on Optimal Forwarding Path Migration

Implementation of a Lossless Moving Target Defense Mechanism

Realization and Defense of RTP Attack on SIP

Research on Network Attacks and Security Countermeasures

A Real-Time Lossless Network Stream Reassembly Mechanism

Real-time Optimization of TCP/IP Protocol Stack in Local Area Network Environment

Robust dynamic network traffic partitioning against malicious attacks.

REAL-GUARD

The Technical Analysis and Security Countermeasure of DoS-based Network Attacks

Design and Hardware Implementation of TCP Packet Filtering Based on State Detection

PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP.

Catch the Whole Lot in an Action: Rapid Precise Packet Loss Notification in Data Center.

An Efficient TCP Flow State Management Algorithm in High-Speed Network

Analysis of low-rate TCP DoS attack against FAST TCP