Decentralized Identifier Distribution for Moving Target Defense and Beyond

No ratings

Presented at CyberScience2020 2020 by

Daniel Schotten

In this work, we propose a novel approach for decentralized identifier distribution and synchronization innetworks. The protocol generates network entity identifiers composed of timestamps and cryptographically securerandom values with a significant reduction of collision probability. The distribution is inspired by Unique UniversalIdentifiers and Timestamp-based Concurrency Control algorithms originating from database applications. We definedfundamental requirements for the distribution, including: uniqueness, accuracy of distribution, optimal timingbehavior, scalability, small impact on network load for different operation modes and overall compliance to commonnetwork security objectives. An implementation of the proposed approach is evaluated and the results are presented.Originally designed for a domain of proactive defense strategies known as Moving Target Defense, the generalarchitecture of the protocol enables arbitrary applications where identifier distributions in networks have to bedecentralized, rapid and secure.