AEH-MTD: Adaptive Moving Target Defense Scheme for SDN

Distributed Denial of Service attack is very harmful to software-defined networking. Effective defense measures are the key to ensure SDN security. An adaptive moving target defense scheme based on end information hopping for SDN is proposed. The source address entropy value and the flow rate method are used to detect the network condition. According to the detection result, the end information is adjusted by time adaptive or space adaptive. A model of active network defense is constructed. The experimental results show that the proposed scheme enhances the anti-attack capability and serviceability compared with other methods, and has greater dynamics and flexibility.

• Publication year

  2019

• Venue

  International Conferences on Smart Internet of Things

• Publication date

  2019-08-01

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1109/SmartIoT.2019.00030
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• FL-GUARD: A Detection and Defense System for DDoS Attack in SDN

  2017cited by this paper
• FL-GUARD: A Detection and Defense System for DDoS Attack in SDN

  2017cited by this paper
• A Port Hopping Based DoS Mitigation Scheme in SDN Network

  2016cited by this paper
• Transparent synchronization based port mutation scheme in SDN network

  2016cited by this paper
• Bohatei: Flexible and Elastic DDoS Defense

  2015cited by this paper
• Openflow random host mutation: transparent moving target defense using software defined networking

  2012cited by this paper
• A Trust Evaluation Algorithm for Wireless Sensor Networks Based on Node Behaviors and D-S Evidence Theory

  2011cited by this paper
• Et al

  2008cited by this paper

• Moving target defense for DDos mitigation with shuffling of critical edge(s) connections

  2026cites this paper
• An optimized reinforcement learning based MTD mutation strategy for securing edge IoT against DDoS attack

  2025cites this paper
• CMTD: A Fast Moving Target Defense Scheme Based on CFL Authentication

  2025cites this paper
• Mitigation of DDoS Attack Using Moving Target Defense in SDN

  2023cites this paper
• SCEMA: An SDN-Oriented Cost-Effective Edge-Based MTD Approach

  2023cites this paper
• A Systematic Literature Review of Offensive and Defensive Security Solutions With Software Defined Network

  2023cites this paper
• A Cost-Effective MTD Approach for DDoS Attacks in Software-Defined Networks

  2022cites this paper
• MTDCD: an MTD Enhanced Cyber Deception Defense System

  2021cites this paper