2021/10/07 by Yongsheng Mei, Mei, Yongsheng, Kailash Gogineni +5 · 1 citation
Computer Science · #Advanced Malware Detection Techniques #Channel (broadcasting) #Chaos-based Image/Signal Encryption #Computer network #Computer science #Computer security #Cryptographic Implementations and Security #Cryptography and Security (cs.CR) #Database transaction #Denial-of-service attack #FOS: Computer and information sciences #Internet Protocol #Internet Protocol Control Protocol #Internet protocol suite #Key (lock) #Link Control Protocol #Network packet #Operating system #Overhead (engineering) #Protocol (science) #Synchronization (alternating current) #The Internet #Two-phase commit protocol #User Datagram Protocol #cs.CR
paper · pdf · doi:10.48550/arxiv.2110.03798
2021 EAI SecureComm
arxiv created 2021/10/07 · openalex publication_date 2021/10/07 · arxiv updated 2021/10/11 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/05
Communication protocol security is among the most significant challenges of the Internet of Things (IoT) due to the wide variety of hardware and software technologies involved. Moving target defense (MTD) has been adopted as an innovative strategy to solve this problem by dynamically changing target system properties and configurations to obfuscate the attack surface. Nevertheless, the existing work of MTD primarily focuses on lower-level properties (e.g., IP addresses or port numbers), and only a limited number of variations can be generated based on these properties. In this paper, we propose a new approach of MTD through communication protocol dialects (MPD) - which dynamically customizes a communication protocol into various protocol dialects and leverages them to create a moving target defense. Specifically, MPD harnesses a dialect generating function to create protocol dialects and then a mapping function to select one specific dialect for each packet during communication. To keep different network entities in synchronization, we also design a self-synchronization mechanism utilizing a pseudo-random number generator with the input of a pre-shared secret key and previously sent packets. We implement a prototype of MPD and evaluate its feasibility on standard network protocol (i.e., File Transfer Protocol) and internet of things protocol (i.e., Message Queuing Telemetry Transport). The results indicate that MPD can create a moving target defense with protocol dialects to effectively address various attacks - including the denial of service attack and malicious packet modifications - with negligible overhead.