{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T01:00:43Z","timestamp":1760144443290,"version":"build-2065373602"},"reference-count":24,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2024,4,22]],"date-time":"2024-04-22T00:00:00Z","timestamp":1713744000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"],"award-info":[{"award-number":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Foundation of Guangxi Province of China","award":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"],"award-info":[{"award-number":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"]}]},{"name":"Guangxi Education Department Program","award":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"],"award-info":[{"award-number":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"]}]},{"name":"Doctoral Fund of Guangxi University of Science and Technology","award":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"],"award-info":[{"award-number":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"]}]},{"name":"Innovation Project of Guangxi Graduate Education","award":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"],"award-info":[{"award-number":["62106053","2024GXNSFAA010242","2021KY0347","XiaoKe Bo19Z33","YCSW2023478"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>Path hopping serves as an active defense mechanism in network security, yet it encounters challenges like a restricted path switching space, the recurrent use of similar paths and vital nodes, a singular triggering mechanism for path switching, and fixed hopping intervals. This paper introduces an active defense method employing multiple constraints and strategies for path hopping. A depth-first search (DFS) traversal is utilized to compute all possible paths between nodes, thereby broadening the path switching space while simplifying path generation complexity. Subsequently, constraints are imposed on residual bandwidth, selection periods, path similitude, and critical nodes to reduce the likelihood of reusing similar paths and crucial nodes. Moreover, two path switching strategies are formulated based on the weights of residual bandwidth and critical nodes, along with the calculation of path switching periods. This facilitates adaptive switching of path hopping paths and intervals, contingent on the network\u2019s residual bandwidth threshold, in response to diverse attack scenarios. Simulation outcomes illustrate that this method, while maintaining normal communication performance, expands the path switching space effectively, safeguards against eavesdropping and link-flooding attacks, enhances path switching diversity and unpredictability, and fortifies the network\u2019s resilience against malicious attacks.<\/jats:p>","DOI":"10.3390\/fi16040143","type":"journal-article","created":{"date-parts":[[2024,4,22]],"date-time":"2024-04-22T06:10:18Z","timestamp":1713766218000},"page":"143","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Multi-Constraint and Multi-Policy Path Hopping Active Defense Method Based on SDN"],"prefix":"10.3390","volume":"16","author":[{"given":"Bing","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuai","family":"Zhang","sequence":"additional","affiliation":[{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"School of Science, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"School of Automotive and Information Engineering, Guangxi Eco-Engineering Vocational and Technical College, Liuzhou 545004, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ning","family":"Wei","sequence":"additional","affiliation":[{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"},{"name":"School of Automotive and Information Engineering, Guangxi Eco-Engineering Vocational and Technical College, Liuzhou 545004, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenhong","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9688-6242","authenticated-orcid":false,"given":"Huan","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Guangxi University of Science and Technology, Liuzhou 545006, China"},{"name":"Liuzhou Key Laboratory of Big Data Intelligent Processing and Security, Liuzhou 545006, China"},{"name":"Cybersecurity Monitoring Center for Guangxi Education System, Liuzhou 545006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2024,4,22]]},"reference":[{"key":"ref_1","unstructured":"Pratyusa, K., and Wing, J.M. (2011). Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats, Springer."},{"key":"ref_2","unstructured":"Hu, R. (2022). Study on Key Technologies of Network Layer Mobile Target Defense Based on SDN. [Ph.D Thesis, School of Cryptographic Engineering, Strategic Support Force Information Engineering University]."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Dolev, S., and David, S.T. (2014, January 21\u201323). SDN-based private interconnection. Proceedings of the 2014 IEEE 13th International Symposium on Network Computing and Applications, Cambridge, MA, USA.","DOI":"10.1109\/NCA.2014.26"},{"key":"ref_4","unstructured":"Duan, Q., Al-Shaer, E., and Jafarian, H. (2013, January 14\u201316). Efficient random route mutation considering flow and network constraints. Proceedings of the 2013 IEEE Conference on Communications and Network Security (CNS), National Harbor, MD, USA."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Jafarian, J.H., Al-Shaer, E., and Duan, Q. (2013, January 9\u201313). Formal approach for route agility against persistent attackers. Proceedings of the 18th European Symposium on Research in Computer Security, Egham, UK.","DOI":"10.1007\/978-3-642-40203-6_14"},{"key":"ref_6","first-page":"8927169","article-title":"SDN-based double hopping communication against sniffer attack","volume":"2016","author":"Zhao","year":"2016","journal-title":"Math. Probl. Eng."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"1046","DOI":"10.1587\/transinf.2016EDP7377","article-title":"A defense mechanism of random routing mutation in SDN","volume":"100","author":"Liu","year":"2017","journal-title":"IEICE Trans. Inf. Syst."},{"key":"ref_8","first-page":"2748","article-title":"Active Defense Technology for SDN Network Based on Path and End Address Hopping","volume":"54","author":"Zhang","year":"2017","journal-title":"Comput. Res. Dev."},{"key":"ref_9","first-page":"2604","article-title":"The design and implementation of a software-defined intranet dynamic defense system","volume":"46","author":"Chen","year":"2018","journal-title":"Acta Electon. Sin."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"977","DOI":"10.1016\/j.procs.2019.04.137","article-title":"Secure multipath mutation SMPM in moving target defense based on SDN","volume":"151","author":"Karim","year":"2019","journal-title":"Proc. Comput. Sci."},{"key":"ref_11","unstructured":"Wang, S. (2019). Research on Key Technologies of Dynamic Target Defense Network Based on SDN. [Ph.D Thesis, National University of Defense Technology]."},{"key":"ref_12","first-page":"3249","article-title":"Network Mobile Target Defense Technology Based on Optimal Path Hopping","volume":"42","author":"Lei","year":"2017","journal-title":"J. Commun."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Zhou, Z., Xu, C., Kuang, X., Zhang, T., and Sun, L. (2019, January 20\u201324). An efficient and agile spatio-temporal route mutation moving target defense mechanism. Proceedings of the 2019 IEEE International Conference on Communications (ICC), Shanghai, China.","DOI":"10.1109\/ICC.2019.8761927"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Tan, H., Tang, C., Zhang, C., and Wang, S. (2017, January 21\u201323). Area-Dividing route mutation in moving target defense based on SDN. Proceedings of the 11th International Conference on Network and System Security, Helsinki, Finland.","DOI":"10.1007\/978-3-319-64701-2_43"},{"key":"ref_15","unstructured":"Zhang, B. (2022). Research on Network Layer Mobile Target Defense in SDN Environment. [Ph.D Thesis, Tianjin University of Technology]."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Zhang, T., Xu, C., Zhang, B., Kuang, X., Wang, Y., Yang, S., and Muntean, G.M. (2020, January 15\u201319). DQ-RM: Deep reinforcement learning-based route mutation scheme for multimedia services. Proceedings of the 2020 International Wireless Communications and Mobile Computing (IWCMC), Limassol, Cyprus.","DOI":"10.1109\/IWCMC48107.2020.9148371"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"13528","DOI":"10.1109\/JIOT.2021.3065680","article-title":"Context-aware adaptive route mutation scheme: A reinforcement learning approach","volume":"8","author":"Xu","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_18","unstructured":"Li, C. (2022). Design and Implementation of Network Hopping Strategy Based on SDN. [Ph.D Thesis, Zhengzhou University]."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"96","DOI":"10.23919\/JCC.fa.2022-0860.202402","article-title":"Traffic engineering and quality of service in hybrid software defined networks","volume":"21","author":"Mehraban","year":"2024","journal-title":"China Commun."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Rauf, U., Gillani, F., Al-Shaer, E., Halappanavar, M., Chatterjee, S., and Oehmen, C. (2016, January 24). Formal approach for resilient reachability based on end-system route agility. Proceedings of the 2016 ACM Workshop on Moving Target Defense, Vienna, Austria.","DOI":"10.1145\/2995272.2995275"},{"key":"ref_21","first-page":"57","article-title":"Research on SDN Architecture Simulation Based on Mininet","volume":"40","author":"Li","year":"2014","journal-title":"Comput. Netw."},{"key":"ref_22","unstructured":"Zhao, Z. (2017). Research on Key Technologies of Mobile Target Defense Based on Software-Defined Network. [Ph.D Thesis, PLA Information Engineering University]."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"9804061","DOI":"10.1155\/2018\/9804061","article-title":"A DDoS attack detection method based on SVM in software defined network","volume":"2018","author":"Ye","year":"2018","journal-title":"Secur. Commun. Netw."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1765","DOI":"10.1109\/JSAC.2011.111002","article-title":"The internet topology zoo","volume":"29","author":"Knight","year":"2011","journal-title":"IEEE J. Sel. Areas Commun."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/4\/143\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T14:32:11Z","timestamp":1760106731000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/4\/143"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,22]]},"references-count":24,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2024,4]]}},"alternative-id":["fi16040143"],"URL":"https:\/\/doi.org\/10.3390\/fi16040143","relation":{},"ISSN":["1999-5903"],"issn-type":[{"type":"electronic","value":"1999-5903"}],"subject":[],"published":{"date-parts":[[2024,4,22]]}}}