An SDN-Based Fingerprint Hopping Method to Prevent Fingerprinting Attacks

Abstract EN

Fingerprinting attacks are one of the most severe threats to the security of networks.

Fingerprinting attack aims to obtain the operating system information of target hosts to make preparations for future attacks.

In this paper, a fingerprint hopping method (FPH) is proposed based on software-defined networks to defend against fingerprinting attacks.

FPH introduces the idea of moving target defense to show a hopping fingerprint toward the fingerprinting attackers.

The interaction of the fingerprinting attack and its defense is modeled as a signal game, and the equilibriums of the game are analyzed to develop an optimal defense strategy.

Experiments show that FPH can resist fingerprinting attacks effectively.