An Approach for Applying Network-based Moving Target Defense into Internet of Things Networks
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
In this paper, we propose an approach to apply network-based moving target defense into Internet of Things (IoT) networks. The IoT is a technology that provides the high interconnectivity of things like electronic devices. However, cyber security risks are expected to increase as the interconnectivity of such devices increases. One recent study demonstrated a man-in-the-middle attack in the statically configured IoT network. In recent years, a new approach to cyber security, called the moving target defense, has emerged as a potential solution to the challenge of static systems. The approach continuously changes system’s attack surface to prevent attacks. After analyzing IPv4 / IPv6-based moving target defense schemes and IoT network-related technologies, we present our approach in terms of addressing systems, address mutation techniques, communication models, network configuration, and node mobility. In addition, we summarize the direction of future research in relation to the proposed approach.
Abstract
In this paper, we propose an approach to apply network-based moving target defense into Internet of Things (IoT) networks. The IoT is a technology that provides the high interconnectivity of things like electronic devices. However, cyber security risks are expected to increase as the interconnectivity of such devices increases. One recent study demonstrated a man-in-the-middle attack in the statically configured IoT network. In recent years, a new approach to cyber security, called the moving target defense, has emerged as a potential solution to the challenge of static systems. The approach continuously changes system’s attack surface to prevent attacks. After analyzing IPv4 / IPv6-based moving target defense schemes and IoT network-related technologies, we present our approach in terms of addressing systems, address mutation techniques, communication models, network configuration, and node mobility. In addition, we summarize the direction of future research in relation to the proposed approach.
참고문헌 (20)
- M. F. Razali, "IoT Honeypot: A Review from Researcher’s Perspective", Proceedings of the 2018 IEEE Conference on Applications, Information and Network Security, pp.93~98 (2018)
- "Gartner Says 4.9 Billion Connected ‘Things’ Will Be in Use in 2015"[URL]
- R. E. Navas, "Demo: Do Not Trust Your Neighbors!A Small IoT Platform Illustrating a Man-in-the-Middle Attack", Proceedings of the 17th International Conference on Ad Hoc Networks and Wireless, pp.120~125 (2018)
- 강구홍, "네트워크 기반 무빙 타켓 방어의 위협 모델 및 요구사항 분석", 한국컴퓨터정보학회논문지, 22(10), pp.83~92 (2017), 한국컴퓨터정보학회[DOI]
- 박태근, "Design of a Protected Server Network with Decoys for Network-based Moving Target Defense", 한국컴퓨터정보학회논문지, 23(9), pp.57~64 (2018), 한국컴퓨터정보학회[DOI]
- D. Kewley, "Dynamic Approaches to Thwart Adversary Intelligence Gathering", Proceedings of the DARPA Information Survivability Conference and Exposition, pp.176~185 (2001)
- M. Atighetchi, "Adaptive Use of Network-Centric Mechanisms in Cyber-Defense", Proceedings of the sixth IEEE International Symposium on Object-Oriented Real-Time Distributed Computing, pp.183~192 (2003)
- S. Antonatos, "Defending against Histlist Worms using Network Address Space Randomization", Computer Networks, 51(12), pp.3471~3490 (2007)
- J. H. Jafarian, "An Effective Address Mutation Approach for Distructing Reconnaissance Attacks", IEEE Transactions on Information Forensics, 10(12), pp.2562~2577 (2015)
- J. Sun, "DESIR: Decoy-enhanced seamless IP randomization", Proceedings of the IEEE INFOCOM (2016)
- J. H. Jafarian, "Multi-dimensional Host Identity Anonymization for Defeating Skilled Attacks", Proceedings of the 2016 ACM Workshop on Moving Target Defense, pp.47~58 (2016)
- T. Park, "A Scalable and Seamless Connection Migration Scheme for Moving Target Defense in Legacy Networks", IEICE Trans. Inf. & Syst, E101-D(11) (2018)
- K. Park, "Pseudonym Address based Hidden Tunnel Networking for Network Address Mutation", KOREA Patent App. No. 10-2018-0076029, ~ (2018)
- M. Dunlop, "MT6D : a moving target IPv6 defense", Proceedings of the Military Communications Conference, pp.1321~1326 (2011)
- S. Deering, "Internet Protocol, Version 6(IPv6)Specication", RFC 2460, Updated by RFCs 5095, 5722, 5871, 6437, 6564, 6935,6946, ~ (1998)
- C. F. Morrell, "Improving the Security, Privacy, and Anonymity of a Client-Server Network through the Application of a Moving Target Defense", Blacksburg, pp.2016
- D. J. Bernstein, "Curve25519: new die-hellman speed records", Proceedings of the 9th Iternational Conference on Theory and Practice in Public Key Cryptography, pp.207~228 (2006), Springer
- A. Brandt, "RPL : IPv6 routing protocol for low-power and lossy networks", RFC 6550, ~ (2012)
- S. Oh, "A hybrid mode to enhance the downward route performance in routing protocol for low power and lossy networks", International Journal of Distributed Sensor Networks, 14(4) (2018)
- A. Kamble, "Security Attacks and Secure Routing Protocols in RPL-based Internet of Things: Survey", Proceedings of 2017 International Conference on Emerging Trends & Innovation in ICT (ICEI), pp.33~39 (2017)