TY  - EJOU
AU  - Xi, Zesheng 
AU  - He, Chuan 
AU  - Wang, Yunfan 
AU  - Zhang, Bo 

TI  - A Dynamic SDN-Based Address Hopping Model for IoT Anonymization
T2  - Computer Modeling in Engineering \& Sciences

PY  - 2025
VL  - 144
IS  - 2
SN  - 1526-1506

AB  - The increasing reliance on interconnected Internet of Things (IoT) devices has amplified the demand for robust anonymization strategies to protect device identities and ensure secure communication. However, traditional anonymization methods for IoT networks often rely on static identity models, making them vulnerable to inference attacks through long-term observation. Moreover, these methods tend to sacrifice data availability to protect privacy, limiting their practicality in real-world applications. To overcome these limitations, we propose a dynamic device identity anonymization framework using Moving Target Defense (MTD) principles implemented via Software-Defined Networking (SDN). In our model, the SDN controller periodically reconfigures the network addresses and routes of IoT devices using a constraint-aware backtracking algorithm that constructs new virtual topologies under connectivity and performance constraints. This address-hopping scheme introduces continuous unpredictability at the network layer dynamically changing device identifiers, routing paths, and even network topology which thwarts attacker reconnaissance while preserving normal communication. Experimental results demonstrate that our approach significantly reduces device identity exposure and scan success rates for attackers compared to static networks. Moreover, the dynamic scheme maintains high data availability and network performance. Under attack conditions it reduced average communication delay by approximately 60% vs. an unprotected network, with minimal overhead on system resources.
KW  - Device anonymization; address hopping; moving target defense; software defined networking; cyber resilience

DO  - 10.32604/cmes.2025.066822