A Hybrid Routing Mutation Mechanism based on Mutation Cost and Resource Trustworthiness in Network Moving Target Defense
Kun Guo, Yibo Gao, Dongbin Wang, Hui Zhi, Tao Zhang, Yueming Lu · 2022
Network moving target defense technology can effectively defend against attacker monitoring of the service. The technology makes it more difficult for attackers to attack and can ensure secure communication for services. However, there may be multiple network attacks in the network. As a result, there may be security problems with the trustworthiness of the network resource mutation space required for network moving target defense technology. The focus of current researches is mostly on the mutation timing and cost optimization of the resource mutation space. It may lead to the possibility that the resources in the resource mutation space have been already under network attacks. In this paper, we propose a hybrid routing mutation mechanism based on mutation cost and resource trustworthiness in SDN networks. The mechanism is able to evaluate the routing mutation space selected by the routing-based network moving target defense technology. In terms of both mutation cost and resource trustworthiness, the optimal weighting ratio of the two factors will be to discovered. Simulation results show that the proposed mechanism can effectively enhance the ability of the routing mutation space to avoid attacked nodes and links and improve the transmission success rate of services.