Hardware validation and shuffle-entropy quantification for CS-SHIELD

Validate CS-SHIELD on hardware SDN switches and formally quantify the entropy of its virtual-IP shuffling mechanism to establish the defense’s applicability and uncertainty guarantees beyond the emulated testbed.

Background

The paper evaluates CS-SHIELD, a reactive moving-target defense for SDN-enabled electric-vehicle charging infrastructure, using an emulated testbed based on Mininet, Open vSwitch, and the Ryu controller. Although the experiments demonstrate that the mechanism can preserve charging availability against low-rate flow-table-exhaustion attacks, the authors identify two unresolved extensions: validating the mechanism on physical SDN switching hardware and providing a formal measure of the entropy generated by its virtual-IP shuffling. These extensions would address the extent to which the reported performance and security properties generalize beyond the emulation environment and would quantify the unpredictability on which the moving-target defense relies.