An Analysis of Switchport Vulnerabilities and MTD Techniques Applied to Mitigate the Port Scanning Threats

Abstract

Moving Target Defense (MTD) techniques are increasingly employed to enhance network security. MTD aims to disrupt the static nature of networks, which can facilitate attackers by easily extracting crucial network information for future vulnerability exploitation. This study investigates the potential synergy between MTD and switchport vulnerabilities. Furthermore, this paper presents a comprehensive study on Moving Target Defense and network scanning, a well-known reconnaissance technique typically involving three main phases: host detection, port discovery, and vulnerability assessment. The analysis reveals two key findings: First, the limited scope of existing MTD solutions applied to mitigate different network threats and attacks. Second, the study identifies vulnerabilities in network switches and proposed potential mitigation strategies. The systematic review analyzed twelve recent publications on MTD applications and five on switch vulnerability solutions. Moreover, the literature review suggests a promising area for further research: exploring the application of MTD techniques to mitigate the threats posed by port scanning.