2021/05/28 by ASM Rizvi, Rizvi, ASM, John Heidemann +1
Computer Science · Engineering · #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #IPv6, Mobility, Handover, Networks, Security #Internet Traffic Analysis and Secure E-voting #Network Security and Intrusion Detection #Networking and Internet Architecture (cs.NI) #cs.CR #cs.NI
paper · pdf · doi:10.48550/arxiv.2105.13592
3 pages, 1 figure
arxiv created 2021/05/28 · openalex publication_date 2021/05/28 · arxiv updated 2021/05/31 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Services on the public Internet are frequently scanned, then subject to brute-force and denial-of-service attacks. We would like to run such services stealthily, available to friends but hidden from adversaries. In this work, we propose a moving target defense named "Chhoyhopper" that utilizes the vast IPv6 address space to conceal publicly available services. The client and server to hop to different IPv6 addresses in a pattern based on a shared, pre-distributed secret and the time-of-day. By hopping over a /64 prefix, services cannot be found by active scanners, and passively observed information is useless after two minutes. We demonstrate our system with SSH, and show that it can be extended to other applications.