Abstract:Communication protocol security is among the most significant challenges of the Internet of Things (IoT) due to the wide variety of hardware and software technologies involved. Moving target defense (MTD) has been adopted as an innovative strategy to solve this problem by dynamically changing target system properties and configurations to obfuscate the attack surface. Nevertheless, the existing work of MTD primarily focuses on lower-level properties (e.g., IP addresses or port numbers), and only a limited number of variations can be generated based on these properties. In this paper, we propose a new approach of MTD through communication protocol dialects (MPD) - which dynamically customizes a communication protocol into various protocol dialects and leverages them to create a moving target defense. Specifically, MPD harnesses a dialect generating function to create protocol dialects and then a mapping function to select one specific dialect for each packet during communication. To keep different network entities in synchronization, we also design a self-synchronization mechanism utilizing a pseudo-random number generator with the input of a pre-shared secret key and previously sent packets. We implement a prototype of MPD and evaluate its feasibility on standard network protocol (i.e., File Transfer Protocol) and internet of things protocol (i.e., Message Queuing Telemetry Transport). The results indicate that MPD can create a moving target defense with protocol dialects to effectively address various attacks - including the denial of service attack and malicious packet modifications - with negligible overhead.

MDPAS: Markov Decision Process Based Adaptive Security for Sensors in Internet of Things.

Evolving Defense Mechanism for Future Network Security

Proactive Security Defense of Dynamic Network

SoK: A Minimalist Approach to Formalizing Analog Sensor Security.

Dynamic Authentication with Sensory Information for the Access Control Systems.

A Proactive Data Security Framework for Mission-Critical Sensor Networks

Mobility and Intruder Prior Information Improving the Barrier Coverage of Sparse Sensor Networks

Markov Decision Process For Automatic Cyber Defense

Using POMDP-based Approach to Address Uncertainty-Aware Adaptation for Self-Protecting Software

Adaptive Security Framework for the Internet of Things: Improving Threat Detection and Energy Optimization in Distributed Environments

A Security Management and Control Solution of Smart Park Based on Sensor Networks

Sustainable Adaptive Security

A comprehensive privacy and security framework for dynamic protection (CPSF)

A Novel Approach for Security Situational Awareness in the Internet of Things

Adaptive MTD Security using Markov Game Modeling

Automated Security Assessment for the Internet of Things

A Collaborative Network Security Management System in Metropolitan Area Network

MPD: Moving Target Defense through Communication Protocol Dialects

A Data-Driven Based Security Situational Awareness Framework for Power Systems

An Architecture of Enhanced Profiling Assurance for IoT Networks

Dynamic threshold strategy optimization for security protection in Internet of Things: An adversarial deep learning‐based game‐theoretical approach