2026-04-10T20:06:00Zhttps://ebiltegia.mondragon.edu/oai/request

oai:ebiltegia.mondragon.edu:20.500.11984/59432026-03-18T08:28:05Zcom_20.500.11984_473col_20.500.11984_478

00925njm 22002777a 4500 dc Etxezarreta, Xabier author Garitano, Iñaki author Iturbe, Mikel author Zurutuza, Urko author 2023 Industrial Control Systems are used in a wide variety of industrial facilities, including critical infrastructures, becoming the main target of multiple security attacks. A malicious and successful attack against these infrastructures could cause serious economic and environmental consequences, including the loss of human lives. Static networks configurations and topologies, which characterize Industrial Control Systems, represent an advantage for attackers, allowing them to scan for vulnerable devices or services before carrying out the attack. Identifying active devices and services is often the first step for many attacks. This paper presents a proactive network reconnaissance defense mechanism based on the temporal randomization of network IP addresses, MAC addresses and port numbers. The obtained information distortion minimizes the knowledge acquired by the attackers, hindering any attack that relies on network addressing. The temporal randomization of network attributes is performed in an adaptive way, minimizing the overhead introduced in the network and avoiding any error and latency in communications. The implementation as well as the tests have been carried out in a laboratory with real industrial equipment, demonstrating the effectiveness of the presented solution. 1572-8196 https://katalogoa.mondragon.edu/janium-bin/janium_login_opac.pl?find&ficha_no=170576 https://hdl.handle.net/20.500.11984/5943 Industrial control systems Moving Target Defense Software defined networking Industrial network security Proactive intrusion response Low delay network attributes randomization to proactively mitigate reconnaissance attacks in industrial control systems