Technique and Application of End-Hopping in Network Defense

End-hopping is a technique proposed in the study of active defense in network security. In this paper, some supplements and modifications are made to the conception of "End-hopping" based on the previous research of our group. And the formal description is put forward. Methods are discussed to implement End-hopping for active defense. After analyzing the shortcomings of service migration, a new technique is designed which called "Middle Agent", with better performance. And this technique is applied to the End-hopping prototype system. By attacking to the prototype system, the feasibility and anti-attack capability of End-hopping technique are proven.