The rise of Bring Your Own Device (BYOD) now poses new challenges (the internal undefended causes the citadel to break through from within) to the concept of traditional boundary-based intranet protection. Based on the idea of isolation and dynamic

this paper designs and implements a Software-defined Intranet Dynamic Defense system (SIDD) to harass cyber kill chain. We allocate virtual IP address space for intranet terminals to hide the real IP address

meanwhile

combine the maneuvering of IP and path to achieve more comprehensive protection. Our experiments indicate that this method can significantly reduce the availability of network reconnaissance

block the network eavesdropping

and increase the difficulties of attacker's real-time attack without affecting network applications.