Random Host Mutation for Moving Target Defense

Abstract--IP mutation, or IP hopping, has been proposed as a proactive cyber defense ag against scanning attacks. However, proposed techniques have significant practical limitations because they are either too inefficient to counter adversary due limited mutation space and speed, or operationally too expensive as they require end-host changes and session interruption. In this poster, we propose a novel transparent IP mutation technique, called RHM, which provides high-speed and unpredictable IP mutation while maintaining active session integrity and low overhead.