Dynamic moving target defense strategy based on adaptive port hopping in SDN
Fangfang Dang, Kehe Wu, Shuai Li, Han Liu, Yifan Song, Xiaoliang Zhang · 2023
Distributed Denial of Service (DDoS) is a huge hazard to Software-Defined Networks (SDN). Active defense technology is one of the effective measures to ensure the security of SDN. Active defense can increase the difficulty of the attacker's attack and reduce the probability of being attacked successfully. However, the active defense method based on port hopping has the problems of fixed hopping strategy, lack of flexibility and poor security (for example, it is easy for an attacker to grasp the law of server port hopping). Aiming at these problems, we proposed a Dynamic Moving Target Defense method based on Adaptive Port Hopping (DMTD-APH). The DMTD-APH combines the characteristics of SDN on the basis of port hopping and improves the flexibility of active defense by designing strategies such as hopping synchronization, hopping and forwarding, and adaptive hopping. At the same time, the DMTD-APH dynamically detects the network status through the source address entropy value and data flow rate method and performs time-adaptive or space-adaptive hopping adjustments to ports according to the detection results to build an adaptive active network defense model. The experimental results show that DMTD-APH enhances the anti-attack and service type of the network, and has stronger dynamics and security.