A Moving Target Defense Security Solution for IoT Applications

Sophisticated cyber-attacks on IoT applications are often launched when malicious entities manage to gather enough information about the characteristics and operations of the network and the devices that are connected. In this paper, we propose MTDIoT, a moving target defense solution that changes the network configuration dynamically over time (or upon specific events), making it hard for an external attacker to target specific devices and services. Furthermore, it has the ability to exclude compromised nodes from updated network configurations, thereby isolating them. Our solution has minimal compute requirements and introduces no burdens limitations making it ideal for IoT deployment, while it can be easily integrated with other commonly used security components (e.g. intrusion detection systems or security assurance platforms) as part of an overall attack prevention and mitigation strategy.