Title :
Optimizing a network layer moving target defense for specific system architectures
Author :
Hardman, Owen ; Groat, Stephen ; Marchany, Randy ; Tront, Joseph
Author_Institution :
Bradley Department of Electrical and Computer Engineering, Virginia Tech Information Technology Security Office, Blacksburg, 24061, USA
Abstract :
Complex defenses, such as moving target defenses, exist to help protect against threats. While these new forms of defense offer increased security, they are resource intensive and cannot be run on many new classes of network connected mobile systems. To provide security for these systems, a highly efficient defense must be used. Moving Target Defense for IPv6 (MT6D) is a network layer moving target defense that was originally designed using Python for portability to a variety of system architectures. Optimizing a moving target defense (MTD) for a specific system architecture increases performance to allow for these new defenses to be deployed in resource constrained environments. By transitioning from Python to C, and by using system specific networking features, MT6D can be successfully deployed to resource constrained network systems.
Keywords :
Computer architecture; Kernel; Libraries; Loss measurement; Network topology; Security; Switches;
Conference_Titel :
Architectures for Networking and Communications Systems (ANCS), 2013 ACM/IEEE Symposium on
Conference_Location :
San Jose, CA, USA
Print_ISBN :
978-1-4799-1640-5
DOI :
10.1109/ANCS.2013.6665191