Moving Target Defense in SDN-enabled EV Charging Network
CS-SHIELD shuffles charger virtual IPs to keep SDN EV sites available under low-rate flow-table DoS.
The paper proposes CS-SHIELD, a moving-target defense for software-defined electric-vehicle charging networks facing low-rate denial-of-service that can fill SDN switch flow tables and take charging sites offline. CS-SHIELD detects malicious flow-table rules through cross-layer identity verification and responds by reassigning virtual IP addresses to all active chargers. On an emulated SDN testbed using a real charging protocol, the authors report full site availability under attack, a fast reaction, and only negligible delay during normal operation. Each shuffle is intended to invalidate the attacker's earlier reconnaissance.
- CS-SHIELD targets low-rate DoS that can exhaust SDN charger flow tables.
- Malicious rules are detected with cross-layer identity verification.
- Reactions reassign virtual IPs to active chargers, invalidating prior reconnaissance.
- An emulated testbed with a real charging protocol kept full site availability.
- Normal-operation delay was described as negligible.
From the original article
1 min read at arxiv.orgSoftware-Defined Networking (SDN) is emerging as a promis- ing technology for EV Charging infrastructure (EVCI) since it enables flexible, programmable control of EVCI networks, yet its security gain to EVCI remains underexplored. SDN-enabled EVCI faces an increas- ing number of cyber threats arising from the convergence of IT and OT components; in particular, low-rate Denial-of-Service (DoS) attacks.
By Roland Plaka · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.