Secure VPN Using Mobile IPv6 Based Moving Target Defense

Abstract

In this paper, we introduce MVPN, a framework for building secure Virtual Private Networks (VPNs) with a novel Mobile IPv6 based Moving Target Defense strategy. Our approach aids in combating remote attacks against a VPN server. By eliminating the static address of the server, we make it difficult for an attacker to find the server. The server''s address is randomly changed at a certain interval creating a moving target. At the same time, authenticated clients are updated through the use of the Binding Update procedure (standard Mobile IPv6 protocol). One key strength of this approach lies in the fact that the clients do not need to make any changes or use special software. Our testbed experiments show low packet-loss rates that may occur due to the handoff delay.