CMTD:A fast Moving Target Defense Scheme based on CFL Authentication
Fangxiao Li, Leyi Shi, Yuchen Zhao, Haoyu Zhang, Zhihao Zhao, Qiang Han · IEEE Internet of Things Journal · 2024
With the development of Internet of Things (IoT), more and more devices are connected to the network. Moving target defense (MTD) provides a security solution for many IoT network devices. However, since MTD is deployed in a packet switching network, there are problems, such as packet delay and congestion. Traditional follow-up synchronization scheme is not competent for high-rate change of MTD. This poses a serious security threat to IoT devices because slow rate changes are powerless in defending against highly adversarial network attacks. In this article, we innovatively propose an MTD synchronization method, which uses synchronization certificates to complete synchronization. Furthermore, we establish a fast switching MTD (CMTD) model based on cryptography fundamental logics (CFLs). It improves MTD switching rate to milliseconds and solves the problem of synchronization in high-speed hopping with high covert requirements. Theoretical analysis and experimental verification show that our method effectively improves the availability and concealment of IoT devices under high-speed hopping. It is of great significance for IoT security protection under high-intensity cyber attacks.