A Hidden Services Port Hopping Approach for Moving Target Defense

Abstract:
Traditional network defense approaches are insufficient to deal with new types of network threats. Active defense approaches based on software defined network helps to solve this problem, which includes random port hopping technology. Existing port hopping approaches have problems such as the inability to completely hide the service port and the complicated hopping mechanism. In this paper, a hidden services port hopping approach for moving target defense is proposed, which uses port names to access the server and deploys to the pox controller to solve these existing problems. The algorithm and the process of proposed approach are presented. The analysis and experimental results show that the proposed approach can effectively realize the complete hiding of the real service port and expand the port hopping space to the entire port range. In the end, the setting range of port hopping frequency for reference is given.