ETRI, server IP address, etc. are continuously changed.
Development of network mutation technology that causes hacker confusion
Users can enjoy seamless service even when their IP address changes.


A domestic research team has developed a technology to prevent cyberattacks before they occur.

The Electronics and Telecommunications Research Institute (ETRI) announced on the 23rd that it has developed a 'network mutation technology' that blocks cyberattacks by continuously changing server IP addresses, etc.

Until now, cyberattack defenses have primarily relied on detection technologies that block hacker intrusions through firewalls or security devices. ETRI's network mutation technology continuously changes server IP addresses and service port numbers while hackers select and prepare their targets, creating confusion and delaying their attack time.

Although it cannot fundamentally prevent hacker infiltration, this technology can block malicious activities after infiltration. It is based on ▲physical and virtual network linkage technology ▲network tunneling technology that forms and maintains a virtual network connection between the server and the user ▲local NAT (Network Address Translation) technology that changes the destination and source IP addresses, port numbers, etc. of network packets.

By utilizing network address mutation technology, users can receive smooth and continuous service without even realizing that the address changes in real time. The server's internal interface is divided into sections with variable addresses and sections with fixed addresses. Hackers can only access the sections with variable addresses. Users can access the server through hidden paths, ensuring safety.


This technology fundamentally blocks exposure of the target system not only to external attackers, but also to scanning and packet sniffing attacks used by attackers inside the network to detect the target. This prevents cyberattacks from ever being launched.

The typical ICT infrastructure used by companies and organizations is prone to vulnerability, as attacker status information is easily exposed. The technology developed by the research team actively modifies ICT infrastructure systems, making vulnerability analysis more difficult.

To enhance the technical perfection, the research team conducted demonstrations at private cloud centers and universities. Furthermore, the technology has been transferred to domestic information security solution developers and is working toward commercialization next year. Furthermore, following selection for the Ministry of National Defense's Defense U-Experimental Project next year, the team plans to conduct demonstrations on military networks targeting Air Force air squadrons and expand the technology across the entire military to strengthen security.