Network edge system defense technology based on active security model
Moving Target Defense
STEALTH MTD
Network edge system defense technology based on active security model
Moving Target Defense technology
By quickly changing the IP address and port number of the host, actively prevent various attacks on specific network hosts(servers)
Moving
Endpoints' persistent access address change
Endpoint's persistent ip-address mutation is detected to attackers as if there are several endpoints on the network.
Target
Attack target detection failure
by server address change
Endpoints' persistent address change make attackers' network scan or DDoS attack failure.
Defense
Automatic Defense by failure of attack target detection
Endpoints' address change works automatically as an defense mechanism against hackers' attack.
High security
The complexity of address prediction will increase according to the number of Ips and ports used, so access information cannot be obtained only by scanning.
High efficiency
Fast address changes without disturbing the data communication process.
High reliability
Prevent the loss of network connection due to the change of the physical IP address of the protected host.
Introduction effect
01
Suppress the attacker's scan
Suppress scanning by changing the address of the web server very quickly(in seconds).
02
Network scanning attack detection
Easy attack detection is possible because very large traffic must be generated for the attack.
03
Can make a clear attack judgment
Through the characteristics of the address information information obtained through the trust relationship, a definite attack can be determined.
By quickly changing the IP address and port number of the host, actively prevent various attacks on specific network hosts(servers)
Moving
Endpoints' persistent access
address change
Target
Attack target detection failure by server address change
Defense
Automatic Defense by failure of attack target detection
Endpoint's persistent ip-address mutation is detected to attackers as if there are several endpoints on the network.
Endpoints' persistent address change
make attackers' network scan or DDoS attack failure.
Endpoints' address change works automatically as an defense mechanism against hackers' attack.
High security
The complexity of address prediction will increase according to the number of Ips and ports used, so access information cannot be obtained only by scanning
High efficiency
Fast address changes without disturbing the data communication process
High reliability
Prevent the loss of network connection due to the change of the physical IP address of the protected host
Introduction effect
01
Suppress the attacker's scan
Suppress scanning by changing the address of the web server very quickly
(in seconds)
02
Network scanning attack detection
Easy attack detection is possible because very large traffic must be generated for the attack
03
Can make a clear attack judgment
Through the characteristics of the address information information obtained through the trust relationship, a definite attack can be determined
