9554

8821

كارشناسي ارشد

برق - مخابرات

اصفهان: دانشگاه صنعتي اصفهان، دانشكده برق و كامپيوتر

1393

نه،66ص.: جدول،نمودار

ص.ع.به فارسي و انگليسي

محمدحسين منشئي

28/11/93

مهدي برنجكوب

مهندسي برق و كامپيوتر

ID8821

Moving Target Defense A New Approach for Defending Against the Advanced Persistent Threats in Computer Networks Mohammadtaghi Adili M Adili@ec iut ac ir 20 Sep 2014 Department of Electrical and computer Engineering Isfahan University of Technology Isfahan 84156 83111 Iran Degree M Sc Language FarsiSupervisor Mohammadhossein Manshaei Manshaei@cc iut ac irAbstractMoving Target Defense MTD is recently defined as one of the game changers in security By applyingMTD defenders are able to modify particular configurations in order to confuse attackers Consequently theattacker cannot find vulnerabilities and leverage on them to launch attacks In this project we first propose aframework to analyze MTD advantages and drawbacks in any given system considering the attack surface Our framework helps designers to find the optimal strategy to be employed with MTD given any new typeof attacks We then define a novel mechanism to implement MTD in IPv6 networks Our approach employsHash Chain Functions to change IP addresses periodically and in a way that the attacker cannot find thetarget easily In comparison with similar approaches our mechanism can be implemented in a transparentway such that the changes in IP address would not tear down the ongoing connections Moreover the routersbetween sender and receiver cannot obtain enough information about the current IP address of the sender thatuses our protocol Finally we compute the optimal time of moves when we use MTD mechanism Weelaborate on FlipIt protocol i e a defined game of stealthy takeover considering the probability ofsuccessful attack defense and show how these parameters can change the time of defense with MTD Webelieve that our results would be the first step towards designing an efficient MTD protocol in computernetworking Keywords Moving Target Defense Network Security Game Theory FlipIt IPv6 AttackSurface

محمدحسين منشئي

مهدي برنجكوب