{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,26]],"date-time":"2025-11-26T05:17:41Z","timestamp":1764134261389,"version":"3.46.0"},"reference-count":32,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T00:00:00Z","timestamp":1763942400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100007062","name":"Yangzhou University","doi-asserted-by":"publisher","award":["YZ2023200"],"award-info":[{"award-number":["YZ2023200"]}],"id":[{"id":"10.13039\/501100007062","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Computers"],"abstract":"<jats:p>Moving Target Defense (MTD) has been proposed as a dynamic defense strategy to address the static and isomorphic vulnerabilities of networks. Recent research in MTD has focused on enhancing its effectiveness by combining it with cyber deception techniques. However, there is limited research on evaluating and quantifying this hybrid defence framework. Existing studies on MTD evaluation often overlook the deployment of deception, which can expand the potential attack surface and introduce additional costs. Moreover, a unified model that simultaneously measures security, reliability, and defense cost is lacking. We propose a novel hybrid defense effectiveness evaluation method that integrates queuing and evolutionary game theories to tackle these challenges. The proposed method quantifies the safety, reliability, and defense cost. Additionally, we construct an evolutionary game model of MTD and deception, jointly optimizing triggering and deployment strategies to minimize the attack success rate. Furthermore, we introduce a hybrid strategy selection algorithm to evaluate the impact of various strategy combinations on security, resource consumption, and availability. Simulation and experimental results demonstrate that the proposed approach can accurately evaluate and guide the configuration of hybrid defenses. Demonstrating that hybrid defense can effectively reduce the attack success rate and unnecessary overhead while maintaining Quality of Service (QoS).<\/jats:p>","DOI":"10.3390\/computers14120513","type":"journal-article","created":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T13:09:25Z","timestamp":1763989765000},"page":"513","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Effectiveness Evaluation Method for Hybrid Defense of Moving Target Defense and Cyber Deception"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-1165-4379","authenticated-orcid":false,"given":"Fangbo","family":"Hou","sequence":"first","affiliation":[{"name":"Faculty of Cyber Science and Engineering, QuFu Normal University, Qufu 276826, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fangrun","family":"Hou","sequence":"additional","affiliation":[{"name":"Faculty of Civil and Transportation Engineering, Southeast University Chengxian College, Nanjing 210088, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaodong","family":"Zang","sequence":"additional","affiliation":[{"name":"Faculty of Cyber Science and Engineering, QuFu Normal University, Qufu 276826, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ziyang","family":"Hua","sequence":"additional","affiliation":[{"name":"Faculty of Cyber Science and Engineering, QuFu Normal University, Qufu 276826, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhang","family":"Liu","sequence":"additional","affiliation":[{"name":"Faculty of Cyber Science and Engineering, QuFu Normal University, Qufu 276826, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhe","family":"Wu","sequence":"additional","affiliation":[{"name":"Faculty of Cyber Science and Engineering, QuFu Normal University, Qufu 276826, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2025,11,24]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"2016","DOI":"10.1109\/TAC.2020.3005686","article-title":"A Moving Target Defense for Securing Cyber-Physical Systems","volume":"66","author":"Griffioen","year":"2021","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"5735","DOI":"10.1109\/TIFS.2023.3314219","article-title":"How to Disturb Network Reconnaissance: A Moving Target Defense Approach Based on Deep Reinforcement Learning","volume":"18","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"13384","DOI":"10.1109\/JIOT.2025.3533016","article-title":"Moving Target Defense Meets Artificial-Intelligence-Driven Network: A Comprehensive Survey","volume":"12","author":"Zhang","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"103506","DOI":"10.1016\/j.cose.2023.103506","article-title":"A hybrid cyber defense framework for reconnaissance attack in industrial control systems","volume":"136","author":"Qin","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"5890","DOI":"10.1109\/TIFS.2023.3318964","article-title":"DOLOS: A Novel Architecture for Moving Target Defense","volume":"18","author":"Pagnotta","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"103685","DOI":"10.1016\/j.cose.2023.103685","article-title":"Proactive defense mechanism: Enhancing IoT security through diversity-based moving target defense and cyber deception","volume":"139","author":"Rehman","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Yan, J., Zhou, Y., and Wang, T. (2023). A Port-Hopping Technology against Remote Attacks and Its Effectiveness Evaluation. Electronics, 12.","DOI":"10.3390\/electronics12112477"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"205","DOI":"10.1109\/TDSC.2018.2882825","article-title":"Performance Modeling of Moving Target Defenses with Reconfiguration Limits","volume":"18","author":"Connell","year":"2021","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"104380","DOI":"10.1016\/j.cose.2025.104380","article-title":"Vulnerability defence using hybrid moving target defence in Internet of Things systems","volume":"153","author":"Masud","year":"2025","journal-title":"Comput. Secur."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Sharma, D.P. (2025). Evaluating Moving Target Defense Methods Using Time to Compromise and Security Risk Metrics in IoT Networks. Electronics, 14.","DOI":"10.20944\/preprints202504.2074.v1"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Ma, D., Tang, Z., Sun, X., Guo, L., Wang, L., and Chen, K. (2022, January 7). Game Theory Approaches for Evaluating the Deception-based Moving Target Defense. Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, Los Angeles, CA, USA.","DOI":"10.1145\/3560828.3563995"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1109\/MIC.2003.1200305","article-title":"Security performance","volume":"7","author":"Menasce","year":"2003","journal-title":"IEEE Internet Comput."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Torquato, M., Maciel, P., and Vieira, M. (2021, January 25\u201328). PyMTDEvaluator: A Tool for Time-Based Moving Target Defense Evaluation: Tool description paper. Proceedings of the 2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE), Wuhan, China.","DOI":"10.1109\/ISSRE52982.2021.00045"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Jalowski, \u0141., Zmuda, M., and Rawski, M. (2022). A Survey on Moving Target Defense for Networks: A Practical View. Electronics, 11.","DOI":"10.3390\/electronics11182886"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"4211","DOI":"10.1109\/TSC.2024.3395919","article-title":"Resource-Aware Cyber Deception for Microservice-Based Applications","volume":"17","author":"Zambianco","year":"2024","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"103267","DOI":"10.1016\/j.jnca.2021.103267","article-title":"Performability evaluation of switch-over Moving Target Defence mechanisms in a Software Defined Networking using stochastic reward nets","volume":"199","author":"Nguyen","year":"2022","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"102091","DOI":"10.1016\/j.cose.2020.102091","article-title":"Evaluating the effectiveness of shuffle and redundancy MTD techniques in the cloud","volume":"102","author":"Alavizadeh","year":"2021","journal-title":"Comput. Secur."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Moghaddam, T., Kim, M., Cho, J.H., Lim, H., Moore, T.J., Nelson, F.F., and Kim, D.D. (2022, January 27\u201330). A Practical Security Evaluation of a Moving Target Defence against Multi-Phase Cyberattacks. Proceedings of the 2022 52nd Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W), Baltimore, MD, USA.","DOI":"10.1109\/DSN-W54100.2022.00026"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Kim, M., Cho, J.H., Lim, H., Moore, T.J., Nelson, F.F., Ko, R.K.L., and Dongseong Kim, D. (2022, January 5\u20139). Evaluating Performance and Security of a Hybrid Moving Target Defense in SDN Environments. Proceedings of the 2022 IEEE 22nd International Conference on Software Quality, Reliability and Security (QRS), Guangzhou, China.","DOI":"10.1109\/QRS57517.2022.00037"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Chen, Y., Zhang, C., and Zhang, T. (2023, January 20\u201322). Spatial-Temporal Decisions for Moving Target Defense Game Subject to Quality of Service Constraints. Proceedings of the 2023 4th International Conference on Computer Engineering and Intelligent Control (ICCEIC), Guangzhou, China.","DOI":"10.1109\/ICCEIC60201.2023.10426706"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"112222","DOI":"10.1016\/j.jss.2024.112222","article-title":"Evaluation of time-based virtual machine migration as moving target defense against host-based attacks","volume":"219","author":"Torquato","year":"2025","journal-title":"J. Syst. Softw."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"3885","DOI":"10.1109\/TDSC.2025.3542237","article-title":"Effectiveness of Moving Target Defenses for Adversarial Attacks in ML-Based Malware Detection","volume":"22","author":"Rashid","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3467021","article-title":"Proactive Defense for Internet-of-things: Moving Target Defense with Cyberdeception","volume":"22","author":"Ge","year":"2021","journal-title":"ACM Trans. Internet Technol."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"59575","DOI":"10.1109\/ACCESS.2023.3278744","article-title":"D3GF: A Study on Optimal Defense Performance Evaluation of Drone-Type Moving Target Defense Through Game Theory","volume":"11","author":"Seo","year":"2023","journal-title":"IEEE Access"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Gao, C., Wang, Y., Xiong, X., and Zhao, W. (2021, January 18\u201320). MTDCD: An MTD Enhanced Cyber Deception Defense System. Proceedings of the 2021 IEEE 4th Advanced Information Management, Communicates, Electronic and Automation Control Conference (IMCEC), Chongqing, China.","DOI":"10.1109\/IMCEC51613.2021.9482133"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"5077","DOI":"10.1007\/s11276-022-03212-5","article-title":"Low delay network attributes randomization to proactively mitigate reconnaissance attacks in industrial control systems","volume":"30","author":"Etxezarreta","year":"2024","journal-title":"Wirel. Netw."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1049\/ise2.12050","article-title":"An optimal defensive deception framework for the container-based cloud with deep reinforcement learning","volume":"16","author":"Li","year":"2022","journal-title":"IET Inf. Secur."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"103792","DOI":"10.1016\/j.cose.2024.103792","article-title":"A comprehensive survey on cyber deception techniques to improve honeypot performance","volume":"140","author":"Javadpour","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"695","DOI":"10.1109\/TPDS.2019.2942591","article-title":"Exploring New Opportunities to Defeat Low-Rate DDoS Attack in Container-Based Cloud Environment","volume":"31","author":"Li","year":"2020","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"109895","DOI":"10.1016\/j.comnet.2023.109895","article-title":"A comprehensive survey on DDoS defense systems: New trends and challenges","volume":"233","author":"Li","year":"2023","journal-title":"Comput. Netw."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3538704","article-title":"Survey and Taxonomy of Adversarial Reconnaissance Techniques","volume":"55","author":"Roy","year":"2022","journal-title":"Acm Comput. Surv."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"17912","DOI":"10.1109\/JIOT.2022.3161790","article-title":"A Double-Benefit Moving Target Defense Against Cyber-Physical Attacks in Smart Grid","volume":"9","author":"Zhang","year":"2022","journal-title":"IEEE Internet Things J."}],"container-title":["Computers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-431X\/14\/12\/513\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,26]],"date-time":"2025-11-26T05:13:25Z","timestamp":1764134005000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-431X\/14\/12\/513"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,24]]},"references-count":32,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["computers14120513"],"URL":"https:\/\/doi.org\/10.3390\/computers14120513","relation":{},"ISSN":["2073-431X"],"issn-type":[{"type":"electronic","value":"2073-431X"}],"subject":[],"published":{"date-parts":[[2025,11,24]]}}}