ADH — Address HoppingIndependent Inventor
Every host
on a rotating
identity.
ADH is an autonomous system that continuously rotates the IP and MAC address of every managed host on a network, in sync, from a single controller — with a one-time setup per host and no kernel modification. A reconnaissance scan finds a target that has already moved on.
One controller, an entire fleet, a light touch on the hosts.
A single controller drives the rotation over standard SSH — including its own management channel, with ports rotating every cycle for security.
One-time setup, lightweight watchdog
Each host gets a one-time provisioning step — SSH access and sudo — and runs a small recovery watchdog. No kernel modules, no ongoing management software to patch.
Fleet-wide, in sync
IP and MAC addresses rotate together across the whole managed fleet, at an operator-defined interval as short as a few seconds.
Automatic recovery
A reconnection engine and per-host watchdog bring back any host lost to power loss, misconfiguration, or infrastructure failure — without an operator.
Traffic keeps moving
Ordinary use of managed hosts — browsing, messaging, general traffic — continues through every rotation cycle.
Validated through sustained endurance testing.
Independently logged runs on commodity hardware, not a single demo. Figures below are the cumulative results to date.
Every host drop with a confirmed external cause — a deliberate mid-run network-adapter restart included — recovered fully autonomously, without operator intervention. Testing to date is internally validated; independent adversarial (red-team) evaluation is proposed future work, not a completed result.
A moving-target foundation for networks that can't stand still.
ADH is a candidate building block wherever a stable network identity is itself the liability — reconnaissance-driven attacks, exposed management infrastructure, or fleets that need to be harder to profile from outside.
Security by design, not by detection
Rather than detecting and reacting to an intrusion attempt, ADH removes the stable target the attempt depends on — before reconnaissance can complete.
Drops onto an existing segment
Any Linux network with SSH access. One-time host provisioning — SSH keys, sudo, a lightweight watchdog — then hosts can be added or removed at runtime.
IP and origin.
Baruch Bonen
Independent inventor and sole developer of ADH, based in Herzliya, Israel. ADH was conceived, architected, implemented, and tested end to end by a single inventor — from the address-generation approach through the reconnection and recovery engine that makes continuous rotation operationally viable.
Work spans network security, air and sea vehicles, and homeland-security systems. ADH is the current focus.
- •30+ years leading large-scale technology and engineering programs in senior VP roles
- •Managed air vehicle programs exceeding $1B and homeland-security/smart-city projects exceeding $500M
- •Cyber Security Intelligence certification
- •B.Sc. Mechanical Engineering, Technion
- •Built and patented ADH independently, start to finish