MOVING TARGET DEFENSE SYSTEM USING DECOY TRAP AND ATTACK SURFACE EXPANSION METHOD THROUGH THEREOF

摘要

The present invention relates to a mobile target defense system using a decoy trap and a method for expanding an attack surface through the same. The system according to an embodiment of the present invention detects address variation within a set of Internet Protocol (IP) addresses included in a network. It may include at least one or more decoys for processing packets not received by the protection target server from among the at least one or more protection target servers that perform the execution and packets that have reached the network. At this time, by executing at least one instruction stored in the memory, the processor of the server to be protected determines the access history of at least one decoy of the sender of the packet that has reached the network, and determines whether or not the packet is received based on the result of the determination. can decide