AP-EH: An Encryption Hopping Method Based on Action Program Enabled SDN

Abstract

Sniffing attack is one of the typical passive network attack methods, which poses a serious threat to network communication security. Detecting and defending against sniffing attacks is challenging due to their stealthy nature. In this paper, we propose an encryption hopping method based on a programmable data plane named AP-EH to defend against sniffing attacks. By leveraging the concept of Moving Target Defense (MTD), AP-EH greatly elevates the complexity and cost for attackers to crack the communication data by dynamically modifying the encryption algorithm and key. Experimental results and analysis demonstrate the security and performance of the proposed method.

Keywords

• Encrypted traffic
• moving target defense
• programmable data plane
• sniffing attack