Multi-dimensional Host Identity Anonymization for Defeating Skilled Attackers
Jafar Haadi Jafarian, Amirreza Niakanlahiji, Ehab S. Al-Shaer, Qi Duan · 2016
While existing proactive-based paradigms such as address mutation are effective in slowing down reconnaissance by naive attackers, they are ineffective against skilled human attackers. In this paper, we analytically show that the goal of defeating reconnaissance by skilled human attackers is only achievable by an integration of five defensive dimensions: (1) mutating host addresses, (2) mutating host fingerprints, (3) anonymizing host fingerprints, (4) deploying high-fidelity honeypots with context-aware fingerprints, and (5) deploying context-aware content on those honeypots.