Abstract:With rapid development of emerging technologies for Internet of Things (IoT), digital twins (DT) have been proposed to support a wide variety of applications. A mobile network is expected to be integrated with DT to form a DT mobile network (DTMN). Unfortunately, DTMN still faces security threats, which have attracted great research attention. Current defense mechanisms are mostly static, i.e., responding after attacks happening. To solve the aforementioned problem, moving target defense (MTD) has been proposed as an innovative solution. However, there exist three major challenges when applying MTD into DTMN. Firstly, less emphasis was paid to collaborative scheduling between multiple MTD schemes, which can improve the security of DTMN. Secondly, MTD schemes require lots of network resources, but few works focus on the time allocation of multiple MTD schemes to reduce network resource consumption. Thirdly, existing defense strategies only rely on current information, but do not consider future information. In this paper, we propose a collaborative mutation-based MTD (CM-MTD) in DTMN. We mainly consider two MTD schemes called host address mutation (HAM) and route mutation (RM), respectively, which adjust network properties and invalidate different stages of cyber kill chain. We firstly formulate a semi-Markov decision process (SMDP) to model time-varying security events and dynamic deployment of multiple MTD schemes. Then, security events are predicted by long short-term memory (LSTM), which are regarded as network states in SMDP. Next, infeasible actions that do not satisfy network constraints will be removed from the action space of the SMDP. Lastly, we design a hierarchical deep reinforcement learning algorithm for collaborative scheduling. Simulation results highlight the effectiveness of CM-MTD compared with baseline solutions.

Cost-effective Migration-Based Dynamic Platform Defense Technique: a CTMDP Approach

Can Migration-based Dynamic Platform Technique Work Effectively: A Quantitative Analysis Perspective

Job Completion Time under Migration-based Dynamic Platform Technique

EI-MTD: Moving Target Defense for Edge Intelligence Against Adversarial Attacks

Exploiting Dynamic Platform Protection Technique for Increasing Service MTTF

A Factored MDP Approach To Moving Target Defense With Dynamic Threat Modeling and Cost Efficiency

Cost-effective Moving Target Defense Against DDoS Attacks Using Trilateral Game and Multi-Objective Markov Decision Processes

An Adaptive Defense Mechanism to Prevent Advanced Persistent Threats.

Every Time Can Be Different: A Data Dynamic Protection Method Based on Moving Target Defense.

Efficient Strategy Selection for Moving Target Defense under Multiple Attacks

Evaluating the Security and Economic Effects of Moving Target Defense Techniques on the Cloud

A Cost-effective Shuffling Method against DDoS Attacks using Moving Target Defense

A Double-Benefit Moving Target Defense Against Cyber–Physical Attacks in Smart Grid

Multi-Dimensional Moving Target Defense Method Based on Adaptive Simulated Annealing Genetic Algorithm

Research and Development of Moving Target Defense Technology

Toward Proactive and Efficient DDoS Mitigation in IIoT Systems: A Moving Target Defense Approach

Model-based Performance Evaluation of a Moving Target Defense System

Moving Target Defense for Service-oriented Mission-critical Networks

Resource-Efficient Low-Rate DDoS Mitigation with Moving Target Defense in Edge Clouds

When Moving Target Defense Meets Attack Prediction in Digital Twins: A Convolutional and Hierarchical Reinforcement Learning Approach

Towards Attack-Resistant Service Function Chain Migration: A Model-Based Adaptive Proximal Policy Optimization Approach