Scaling IPv6 address bindings in support of a moving target defense

摘要: Moving target defense is an area of network security research in which machines are moved logically around a order to avoid detection. This done by leveraging the immense size IPv6 address space and statistical improbability two selecting same address. defensive technique forces malicious actor focus on reconnaissance phase their attack rather than focusing only finding holes machine's static defenses. We have current implementation moving entitled MT6D, works well although limited functioning peer scenario. As we push our forward into client server networks, must discover what limits reference ratio. In simple UDP echo that binds large numbers addresses ethernet interface, both number can successfully bind interface speed at requests be handled across bound interfaces.