Paper Info
Title
CHAOS: an SDN-based Moving Target Defense System.
Abstract
Moving target defense (MTD) has provided a dynamic and proactive network defense to reduce or move the attack surface that is available for exploitation. However, traditional network is difficult to realize dynamic and active security defense effectively and comprehensively. Software-defined networking (SDN) points out a brand-new path for building dynamic and proactive defense system. In this paper, we propose CHAOS, an SDN-based MTD system. Utilizing the programmability and flexibility of SDN, CHAOS obfuscates the attack surface including host mutation obfuscation, ports obfuscation, and obfuscation based on decoy servers, thereby enhancing the unpredictability of the networking environment. We propose the Chaos Tower Obfuscation (CTO) method, which uses the Chaos Tower Structure (CTS) to depict the hierarchy of all the hosts in an intranet and define expected connection and unexpected connection. Moreover, we develop fast CTO algorithms to achieve a different degree of obfuscation for the hosts in each layer. We design and implement CHAOS as an application of SDN controller. Our approach makes it very easy to realize moving target defense in networks. Our experimental results show that a network protected by CHAOS is capable of decreasing the percentage of information disclosure effectively to guarantee the normal flow of traffic.
Year
Venue
DocType
2017
Security and Communication Networks
Journal
Volume
Citations 
PageRank 
abs/1704.01482
0
0.34
References 
Authors
10
6
Name
Order
Citations
PageRank
Juan Wang101.35
Feng Xiao253.10
Jianwei Huang33643260.73
Daochen Zha4168.13
Hongxin Hu5123082.32
Huanguo Zhang621439.35