An SDN-Based Moving Target Defense as a Countermeasure to Prevent Network Scans

This paper proposes a Software-Defined Network (SDN)-based Moving Target Defense (MTD) to protect the network from potential scans in compromised network. As unique feature, contrary traditional MTDs, proposed MTD can work alongside other tools and countermeasures already deployed (e.g., Intrusion Protection Detection Systems) without affecting its behavior. Through extensive evaluation, we showed effectiveness of mechanism compared existing solutions preventing different rates controller performance.