Year: 2025
Type: conference-paper
Abstract: Reconnaissance is a crucial stage of cyberattacks, enabling attackers to gather information about system vulnerabilities.In computer networks, data regarding addressing and transmission paths is especially sensitive.This paper introduces a concept for a hybrid mutation system based on Software Defined Networking (SDN), combining address and data path mutation to improve security.The system employs central network management and pseudorandom, temporary addressing, which is periodically reconfigured.In contrast to existing Moving Target Defense (MTD) address mutation methods, end devices connect through dedicated agents, which can be implemented using a SmartNIC.The agent modifies packet headers at a network edge to obfuscate address information, minimizing the processing burden on SDN switches inside a network.The objective is to hinder attackers from discovering network details that could be exploited.A prototype was implemented using typical SDN components and containerized end devices.Tests confirmed the system's correctness and effectiveness in protecting the network structure and communication paths.This approach enhances the confidentiality of network parameters and limits the information available to potential attackers, making reconnaissance significantly more difficult, while minimizing SDN network control overhead.
DOI: 10.15439/2025f3136
Authors: Mateusz Fronczyk, Mariusz Rawski
Institution: Warsaw University of Technology
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W4415420690