Moving Target Defense Router: MaTaDoR

Berkan Ufuk, Berkan Ufuk, Mehmet Sandikkaya

2022

Abstract

The continuous increase in network attacks and the complexity of the available offensive technologies enforces novel defensive mechanisms. Moving Target Defense (MTD) is a recent family of approaches for network defense. This study proposes MaTaDoR, which utilizes message authentication akin to TCP Authentication Option (TCP-AO) in a MTD setting to mitigate a wide range of attacks, including Denial of Service (DoS). The purpose of MaTaDoR is averting unauthenticated packets from reaching protected assets. When many other MTD approaches aim to delay adversaries, MaTaDoR strictly protects networked assets from unauthenticated access. MaTaDoR is transparent, stateless and scalable. The efficiency of this combination is demonstrated by the results of a simulation. The proposed approach is capable of blocking every DoS packet with an insignificant trade-off increase in end-to-end delay.

Paper Citation

in Harvard Style

Ufuk B. and Sandikkaya M. (2022). Moving Target Defense Router: MaTaDoR. In Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT, ISBN 978-989-758-590-6, pages 649-654. DOI: 10.5220/0011306500003283

in Bibtex Style

@conference{secrypt22,
author={Berkan Ufuk and Mehmet Sandikkaya},
title={Moving Target Defense Router: MaTaDoR},
booktitle={Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,},
year={2022},
pages={649-654},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011306500003283},
isbn={978-989-758-590-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,
TI - Moving Target Defense Router: MaTaDoR
SN - 978-989-758-590-6
AU - Ufuk B.
AU - Sandikkaya M.
PY - 2022
SP - 649
EP - 654
DO - 10.5220/0011306500003283