Design of a Network Scan Defense Method by Combining an SDN-based MTD and IPS
Shoya Chiba, Luis Guillen, Satoru Izumi, Toru Abe, Takuo Suganuma · 2021
This paper proposes a Software-Defined Network (SDN)-based Moving Target Defense (MTD) mechanism to protect the network from potential scans. The proposed mechanism can work in combination with an IPS without affecting its normal behavior. To do so, an SDN controller changes the packets' headers passing through switches using virtual IP addresses while the operation of IPS continues monitoring the devices' actual IP addresses. Preliminary results in an emulated environment show that it is possible to achieve a seamless collaboration between the MTD and IDS to detect low and high-rate scans.