Moving Target Defence Against Internet Denial of Service Attacks

DDOS attacks (distributed denial of service) are a critical threat to critical infrastructure and internet services. Traditional defense mechanisms such as rate limiting and IP blacklisting are often out of the question due to the development of sophistication in attack strategies such as botnets, reinforcement attacks, and multi-vector exploits. In this article, we propose a mobile target defense mechanism that guarantees service access for authenticated customers against flood DDOS attacks Our design directly bombs network infrastructure by effectively blocking external attackers' testing and hiding real service endpoints from potential opponents. As a result, an attacker must work with a malicious insider to find a secret proxy before launching a target attack. To combat insider threats, "moves" secretly incorporates proxy secretly into new network locations, dynamically combining client-to-proxy assignments. This adaptation strategy significantly increases the difficulty for attackers to maintain their attacks as endangered proxies are quickly assigned and attackers are isolated from legitimate users. Develop greedy mixing algorithms that strategically minimize the number of new scans (shuffles) for new proxy, while at the same time maximizing attack insulation