{"title":"Moving Target Defense Application and Analysis in Software-Defined Networking","authors":"Charan Gudla, A. Sung","doi":"10.1109/IEMCON51383.2020.9284847","DOIUrl":null,"url":null,"abstract":"Software-Defined Networking (SDN) dissociates the control plane from the data plane, creating a central point facilitating managed services and network virtualization. SDN allows flexibility by dynamic programmability features. On the other hand, Moving Target Defense (MTD) increases complexity in the network to prevent or delay attacks by continuously creating and adapting to the dynamic environment. In this paper, we implement a Moving Target Defense technique in Software-Defined Networking and analyze the TCP and UDP traffic generated in the network. MTD implementation in SDN has been well studied, but there is little work to analyze and evaluate the impact of this dynamic environment on SDN performance. The network's dynamic nature creates considerable overhead on the controller, resulting in poor performance, latency, jitter, and packet loss. This paper analyzes MTD traffic implemented in a software-defined network and compares the results with the traditional (without MTD) software-defined network topology.","PeriodicalId":6871,"journal":{"name":"2020 11th IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON)","volume":"32 1","pages":"0641-0646"},"PeriodicalIF":0.0000,"publicationDate":"2020-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 11th IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IEMCON51383.2020.9284847","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 2
Abstract
Software-Defined Networking (SDN) dissociates the control plane from the data plane, creating a central point facilitating managed services and network virtualization. SDN allows flexibility by dynamic programmability features. On the other hand, Moving Target Defense (MTD) increases complexity in the network to prevent or delay attacks by continuously creating and adapting to the dynamic environment. In this paper, we implement a Moving Target Defense technique in Software-Defined Networking and analyze the TCP and UDP traffic generated in the network. MTD implementation in SDN has been well studied, but there is little work to analyze and evaluate the impact of this dynamic environment on SDN performance. The network's dynamic nature creates considerable overhead on the controller, resulting in poor performance, latency, jitter, and packet loss. This paper analyzes MTD traffic implemented in a software-defined network and compares the results with the traditional (without MTD) software-defined network topology.
SDN (software defined Networking)将控制平面和数据平面分离开来,形成一个中心点,便于管理业务和网络虚拟化。SDN通过动态可编程特性实现灵活性。另一方面,移动目标防御(MTD)增加了网络的复杂性,通过不断创造和适应动态环境来防止或延迟攻击。本文在软件定义网络中实现了一种移动目标防御技术,并对网络中产生的TCP和UDP流量进行了分析。MTD在SDN中的实现已经得到了很好的研究,但是分析和评估这种动态环境对SDN性能的影响的工作很少。网络的动态特性会给控制器带来相当大的开销,从而导致性能差、延迟、抖动和丢包。本文分析了在软件定义网络中实现的MTD流量,并将结果与传统的(没有MTD的)软件定义网络拓扑进行了比较。