Abstract:Resource constrained Internet-of-Things (IoT) devices are highly likely to be compromised by attackers because strong security protections may not be suitable to be deployed. This requires an alternative approach to protect vulnerable components in IoT networks. In this paper, we propose an integrated defense technique to achieve intrusion prevention by leveraging cyberdeception (i.e., a decoy system) and moving target defense (i.e., network topology shuffling). We verify the effectiveness and efficiency of our proposed technique analytically based on a graphical security model in a software defined networking (SDN)-based IoT network. We develop four strategies (i.e., fixed/random and adaptive/hybrid) to address "when" to perform network topology shuffling and three strategies (i.e., genetic algorithm/decoy attack path-based optimization/random) to address "how" to perform network topology shuffling on a decoy-populated IoT network, and analyze which strategy can best achieve a system goal such as prolonging the system lifetime, maximizing deception effectiveness, maximizing service availability, or minimizing defense cost. Our results demonstrate that a software defined IoT network running our intrusion prevention technique at the optimal parameter setting prolongs system lifetime, increases attack complexity of compromising critical nodes, and maintains superior service availability compared with a counterpart IoT network without running our intrusion prevention technique. Further, when given a single goal or a multi-objective goal (e.g., maximizing the system lifetime and service availability while minimizing the defense cost) as input, the best combination of "how" and "how" strategies is identified for executing our proposed technique under which the specified goal can be best achieved.

Deception-Resistant Stochastic Manufacturing for Automated Production Lines

Exploring injection prevention technologies for security-aware distributed collaborative manufacturing on the Semantic Web

A Dynamic Event-Triggered Secure Monitoring and Control for a Class of Discrete-Time Markovian Jump Systems: A Plug-and-Play Architecture

Design for Low Latency and High Reliability: OPC-UA Based Production Line for Product Traceability and Customized Service

CORMAND2: A Deception Attack Against Industrial Robots

PDDL: Proactive Distributed Detection and Localization Against Stealthy Deception Attacks in DC Microgrids

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

DNAttest: Digital-twin-based Non-intrusive Attestation under Transient Uncertainty.

Equipment Contention Attack in Cloud Manufacturing Environments and Its Defense

Detecting Cyber-Attacks Against Cyber-Physical Manufacturing System: A Machining Process Invariant Approach

Attack graph-based stochastic modeling approach for enabling cybersecure semiconductor wafer fabrication

Finite-Time Self-Triggered Stabilization for Networked Power System with Deception Attacks

Improving supply chain security using big data

Distort to Detect, not Affect: Detecting Stealthy Sensor Attacks with Micro-distortion

Securing Manufacturing Using Blockchain

Securing Smart Manufacturing by Integrating Anomaly Detection With Zero-Knowledge Proofs

Proactive Defense for Internet-of-Things: Integrating Moving Target Defense with Cyberdeception

A moving target defence approach for detecting deception attacks on cyber-physical systems

A Study on Networked Industrial Robots in Smart Manufacturing: Vulnerabilities, Data Integrity Attacks and Countermeasures

Exposing Hidden Attackers in Industrial Control Systems using Micro-distortions