Paper Info
Title
“MystifY”: A proactive Moving-Target Defense for a resilient SDN controller in Software Defined CPS
Abstract
The recent devastating mission Cyber–Physical System (CPS) attacks, failures, and the desperate need to scale and to dynamically adapt to changes, revolutionized traditional CPS to what we name as Software Defined CPS (SD-CPS). SD-CPS embraces the concept of Software Defined (SD) everything where CPS infrastructure is more elastic, dynamically adaptable and online-programmable. However, in SD-CPS, the threat became more immanent, as the long-been physically-protected assets are now programmatically accessible to cyber attackers. In SD-CPSs, a network failure hinders the entire functionality of the system. In this paper, we present MystifY, a spatiotemporal runtime diversification for Moving-Target Defense (MTD) to secure the SD-CPS infrastructure. In this paper, we relied on Smart Grid networks as crucial SD-CPS application to evaluate our presented solution. MystifY’s MTD relies on a set of pillars to ensure the SDN controller resiliency against failures and attacks. The 1st pillar is a grid-aware algorithm that optimally allocates the most suitable controller–deployment​ location in large-scale grids. The 2nd pillar is a special diversifier that dynamically relocates the controller between heterogeneously configured hosts to avoid host-based attacks. The 3rd pillar is a temporal diversifier that dynamically detours controller–workload between multiple controllers to enhance their reliability and to detect and avoid controller intrusions. Our experimental results showed the efficiency and effectiveness of the presented approach.
Year
DOI
Venue
2022
10.1016/j.comcom.2022.03.019
Computer Communications
Keywords
DocType
Volume
CPC,SDN,CPP,MTD,Smart grid,Network security
Journal
189
ISSN
Citations 
PageRank 
0140-3664
0
0.34
References 
Authors
0
3
Name
Order
Citations
PageRank
Mohamed Azab100.34
Mohamed Samir200.34
Effat Samir301.69