{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T07:06:37Z","timestamp":1783148797971,"version":"3.54.6"},"reference-count":41,"publisher":"Wiley","license":[{"start":{"date-parts":[[2021,8,10]],"date-time":"2021-08-10T00:00:00Z","timestamp":1628553600000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2019QY1301"],"award-info":[{"award-number":["2019QY1301"]}]},{"name":"National Key Research and Development Program of China","award":["2019QY1303"],"award-info":[{"award-number":["2019QY1303"]}]},{"name":"National Key Research and Development Program of China","award":["61902427"],"award-info":[{"award-number":["61902427"]}]},{"name":"National Key Research and Development Program of China","award":["61802404"],"award-info":[{"award-number":["61802404"]}]},{"name":"National Key Research and Development Program of China","award":["131PLJRC644"],"award-info":[{"award-number":["131PLJRC644"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2019QY1301"],"award-info":[{"award-number":["2019QY1301"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2019QY1303"],"award-info":[{"award-number":["2019QY1303"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902427"],"award-info":[{"award-number":["61902427"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61802404"],"award-info":[{"award-number":["61802404"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["131PLJRC644"],"award-info":[{"award-number":["131PLJRC644"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["2019QY1301"],"award-info":[{"award-number":["2019QY1301"]}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["2019QY1303"],"award-info":[{"award-number":["2019QY1303"]}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["61902427"],"award-info":[{"award-number":["61902427"]}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["61802404"],"award-info":[{"award-number":["61802404"]}]},{"name":"Science and Technology Leading Talent Project of Zhengzhou","award":["131PLJRC644"],"award-info":[{"award-number":["131PLJRC644"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2021,8,10]]},"abstract":"<jats:p>Scanning attack is normally the first step of many other network attacks such as DDoS and propagation worm. Because of easy implementation and high returns, scanning attack especially cooperative scanning attack is widely used by hackers, which has become a serious threat to network security. In order to defend against scanning attack, this paper proposes an adaptive IP hopping in software defined network for moving target defense (MTD). In order to accurately respond to attacker\u2019s behavior in real time, a light-weight convolutional neural network (CNN) detector composed of three convolutional modules and a judgment module is proposed to sense scanning attack. Input data of the detector is generated via designed packets sampling and data preprocess. The detection result of the detector is used to trigger IP hopping. In order to provide some fault tolerance for the CNN detector, IP hopping can also be triggered by a preset timer. The CNN driving adaptability is applied to a three-level hopping strategy to make the MTD system optimize its behavior according to real time attack. Experiments show that compared with existing technologies, our proposed method can significantly improve the defense effect to mitigate scanning attack and its subsequent attacks which are based on hit list. Hopping frequency of the proposed method is also lower than that of other methods, so the proposed method shows lower system overhead.<\/jats:p>","DOI":"10.1155\/2021\/8848473","type":"journal-article","created":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T05:28:02Z","timestamp":1629091682000},"page":"1-17","source":"Crossref","is-referenced-by-count":15,"title":["An Adaptive IP Hopping Approach for Moving Target Defense Using a Light-Weight CNN Detector"],"prefix":"10.1155","volume":"2021","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1289-6073","authenticated-orcid":true,"given":"Xiaoyu","family":"Xu","sequence":"first","affiliation":[{"name":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou 450001, China"},{"name":"Zhengzhou Information Science and Technology Institute, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hao","family":"Hu","sequence":"additional","affiliation":[{"name":"Zhengzhou Information Science and Technology Institute, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuling","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China"},{"name":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing 101408, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongqi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Zhengzhou Information Science and Technology Institute, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dexian","family":"Chang","sequence":"additional","affiliation":[{"name":"Zhengzhou Information Science and Technology Institute, Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","reference":[{"key":"1"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2015.2467358"},{"key":"3","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4614-0977-9","volume-title":"Moving Target Defense","author":"S. Jajodia","year":"2011"},{"key":"4","article-title":"DDoS attack and interception resistance IP fast hopping based protocol","author":"V. Krylov","year":"2014"},{"key":"5","first-page":"266","article-title":"Technique and application of End-hopping in network defense","author":"C. Zhao"},{"key":"6","first-page":"678","article-title":"Effectiveness of IP address randomization in decoy-based moving target defense","author":"A. Clark"},{"key":"7","first-page":"31","article-title":"Towards a theory of moving target defense","author":"R. Zhuang"},{"key":"8","first-page":"1381","article-title":"A self-shielding dynamic network architecture","author":"J. Yackoski"},{"key":"9","article-title":"Toward proactive, adaptive defense: a survey on moving target defense","volume":"99","author":"J. H. Cho","year":"2019","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"10","doi-asserted-by":"crossref","DOI":"10.1109\/MILCOM.2011.6127486","article-title":"MT6D: a moving target IPv6 defense","author":"M. Dunlop","year":"2011"},{"key":"11","first-page":"440","article-title":"Scaling IPv6 address bindings in support of a moving target defense","author":"C. Morrell"},{"key":"12","article-title":"The design and implementation of a dynamic IP defense system accelerated by vector packet processing","author":"L. Miao"},{"key":"13","first-page":"127","article-title":"Openflow random host mutation: transparent moving target defense using software defined networking","author":"J. H. Jafarian"},{"key":"14","first-page":"69","article-title":"Spatio-temporal address mutation for proactive cyber agility against sophisticated attackers","author":"J. H. H. Jafarian"},{"key":"15","first-page":"1","article-title":"SDI defense against DDoS attacks based on IP Fast hopping method","author":"V. Krylov"},{"key":"16","doi-asserted-by":"crossref","article-title":"Adversary-aware IP address randomization for proactive agility against sophisticated attackers","author":"J. H. Jafarian","DOI":"10.1109\/INFOCOM.2015.7218443"},{"key":"17","first-page":"37","article-title":"The SDN shuffle: creating a moving-target defense using host-based software-defined networking","author":"D. C. MacFarland"},{"issue":"1","key":"18","doi-asserted-by":"crossref","first-page":"308","DOI":"10.1109\/TNSM.2018.2889842","article-title":"Fast ip hopping randomization to secure hop-by-hop access in sdn","volume":"16","author":"S. Y. Chang","year":"2018","journal-title":"IEEE Transactions on Network and Service Management"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1007\/s13369-017-2430-5"},{"key":"20","first-page":"1095","article-title":"Initiating a moving target network defense with a real-time neuro-evolutionary detector","author":"R. J. Smith"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.05.007"},{"key":"22","article-title":"A self-adaptive hopping approach of moving target defense to thwart scanning attacks","author":"D. Ma"},{"key":"23","first-page":"204","article-title":"DDoS attack detection based on RBFNN in SDN","author":"J. Li"},{"key":"24","first-page":"34","article-title":"Experiences with worm propagation simulations","author":"A. Wagner"},{"issue":"2","key":"25","first-page":"30","article-title":"Software-defined networking","volume":"17","author":"N. McKeown","year":"2009","journal-title":"INFOCOM keynote talk"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.3724\/sp.j.1001.2013.04390"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355746"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-2766-4_5"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2007.02.006"},{"key":"31","first-page":"176","article-title":"Dynamic approaches to thwart adversary intelligence gathering","author":"D. Kewley"},{"key":"32","first-page":"351","article-title":"Discriminating DDoS flows from flash crowds using information distance","author":"S. Yu"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2005.07.032"},{"key":"34","article-title":"Convolutional neural network for intrusion detection system in cyber physical systems","author":"D. Teyou","year":"2019"},{"key":"35","first-page":"116","article-title":"An approach for host-based intrusion detection system design using convolutional neural network","author":"N. N. Tran"},{"key":"36","first-page":"1","article-title":"Character-level intrusion detection based on convolutional neural networks","author":"S. Z. Lin"},{"key":"37","article-title":"LuNet: a deep neural network for network intrusion detection","author":"P. Wu","year":"2019"},{"key":"38","first-page":"2488","article-title":"How does batch normalization help optimization?","author":"S. Santurkar"},{"key":"39","first-page":"807","article-title":"Rectified linear units improve restricted Boltzmann machines","author":"V. Nair"},{"key":"40","first-page":"1","article-title":"A network in a laptop: rapid prototyping for software-defined networks[C]","author":"B. Lantz"},{"key":"41","first-page":"265","article-title":"Tensorflow: a system for large-scale machine learning","author":"M. Abadi"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8848473.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8848473.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/8848473.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T05:28:25Z","timestamp":1629091705000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2021\/8848473\/"}},"subtitle":[],"editor":[{"given":"Mohamed Amine","family":"Ferrag","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"editor"}]}],"short-title":[],"issued":{"date-parts":[[2021,8,10]]},"references-count":41,"alternative-id":["8848473","8848473"],"URL":"https:\/\/doi.org\/10.1155\/2021\/8848473","relation":{},"ISSN":["1939-0122","1939-0114"],"issn-type":[{"value":"1939-0122","type":"electronic"},{"value":"1939-0114","type":"print"}],"subject":[],"published":{"date-parts":[[2021,8,10]]}}}