Hybrid mutation MTD solution with dedicated SDN agents

Reconnaissance is a crucial stage of cyberattacks, enabling attackers to gather information about system vulnerabilities.In computer networks, data regarding addressing and transmission paths is especially sensitive.This paper introduces a concept for a hybrid mutation system based on Software Defined Networking (SDN), combining address and data path mutation to improve security.The system employs central network management and pseudorandom, temporary addressing, which is periodically reconfigured.In contrast to existing Moving Target Defense (MTD) address mutation methods, end devices connect through dedicated agents, which can be implemented using a SmartNIC.The agent modifies packet headers at a network edge to obfuscate address information, minimizing the processing burden on SDN switches inside a network.The objective is to hinder attackers from discovering network details that could be exploited.A prototype was implemented using typical SDN components and containerized end devices.Tests confirmed the system's correctness and effectiveness in protecting the network structure and communication paths.This approach enhances the confidentiality of network parameters and limits the information available to potential attackers, making reconnaissance significantly more difficult, while minimizing SDN network control overhead.