@article{20,
  author = {Andres Aharhel Mercado-Velazquez and Ponciano Jorge Escamilla-Ambrosio and Floriberto Ortiz-Rodriguez},
  title = {A Moving Target Defense Strategy for Internet of Things Cybersecurity},
  abstract = {This work proposes a Moving Target Defense (MTD) strategy that randomly shuffles the communication protocols through which a node communicates to a gateway in an IoT network. The system’s configuration changes have an associated cost. The objective of the proposed MTD strategy in this work is to balance the increase in system performance overhead, the increase in business impact (system unavailability), and, at the same time, the decrease in the probability of success of a given attack. A framework is proposed to design this strategy; this framework can guide any MTD strategy for IoT (Internet of Things) systems. The framework’s objective is to find, after several iterations, the MTD strategy parameters that achieve a balance between five different measurable variables of an IoT system.},
  year = {2021},
  journal = {Institute of Electrical and Electronics Engineers (IEEE)},
  month = {2021},
  issn = {2169-3536},
  url = {https://ieeexplore.ieee.org/abstract/document/9521488},
  doi = {10.1109/ACCESS.2021.3107403},
  note = {The framework uses multiple-criteria decision analysis to determine the best solution (balance) given a set of parameters (elements of an MTD strategy) and goals (policies). In this work, we designed an MTD strategy for the chosen IoT use case that reduces by 70% the probability of success of a denial-of-service attack that exploits vulnerabilities in IoT wireless communication protocols, assuming that the probability of success of such attack is equal to 1, i.e., 100% if the MTD strategy is not implemented.
In addition, on average, considering CPU time, power consumption, and memory usage, the designed strategy increases system overhead by only 19% compared to the system performance when it is not running any MTD strategy. Finally, the designed strategy affects the service availability by only 2%, compared to 0% of service interruption time when the system does not execute any MTD strategy.},
}