Moving-target Defense against Botnet Reconnaissance and an Adversarial Coupon-Collection Model

2017/12/04 by Neda Nasiriani, Yuquan Shan, Nasiriani, Neda +9
Computer Science · Engineering · #Advanced Malware Detection Techniques #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Network Security and Intrusion Detection #Smart Grid Security and Resilience #Software-Defined Networks and 5G #Spam and Phishing Detection #cs.CR

paper · pdf · doi:10.48550/arxiv.1712.01102

openalex publication_date 2017/12/04 · arxiv created 2018/04/26 · arxiv updated 2018/04/27 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

We consider a cloud based multiserver system consisting of a set of replica application servers behind a set of proxy (indirection) servers which interact directly with clients over the Internet. We study a proactive moving-target defense to thwart a DDoS attacker's reconnaissance phase and consequently reduce the attack's impact. The defense is effectively a moving-target (motag) technique in which the proxies dynamically change. The system is evaluated using an AWS prototype of HTTP redirection and by numerical evaluations of an adversarial coupon-collector mathematical model, the latter allowing larger-scale extrapolations.

Related

• Numerical Evaluation of Cloud-Side Shuffling Defenses against DDoS Attacks on Proxied Multiserver Systems
• Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense
• Proactive DDoS Attack Mitigation in Cloud-Fog Environment using Moving Target Defense
• Mirage: Towards Deployable DDoS Defense for Web Applications
• Evaluating the Security and Economic Effects of Moving Target Defense Techniques on the Cloud