Port and address hopping for active cyber-defense

Abstract

Motivated by frequency hopping, port and address hopping technique is thought to be essential and efficient for active cyber-defense and intelligence security. A novel scheme of timestamp-based synchronization is proposed and a prototype using port and address hopping tactic is carried out. Then a test-bed is implemented for the fragment transmission of plaintext over different LANs. In order to evaluate the performance of the hopping tactic, experiments on DoS and eavesdropping attacks are performed which demonstrate that port and address hopping mechanism has better performance than no hopping tactic and simple port hopping service. © Springer-Verlag Berlin Heidelberg 2007.