System and method for encrypted communication based on network address mutation

A system for securely moving encrypted communication based on network address mutation, the system comprising:

• a policy server for registering and managing a policy for mutating a physical address of a server on the basis of service information, address mutation cycle and range, and life cycle provided by the server;
• a client terminal which, upon successful authentication, is assigned a virtual hidden address enabling access a protection target server desired by a terminal from the policy server, and attempts to establish a communication connection with the protection target server using the assigned virtual address;
• and
• the protection target server including an address mutation server agent configured to receive, from the policy server, a policy of mutating a physical address of a corresponding server, and to mutate the physical address at regular intervals according to a mutation rule of the policy, in order to transmit or receive packets to or from the client terminal through the hidden tunnel by generating a hidden tunnel so that the communication connection is maintained through the virtual address assigned to the client terminal although the physical address is mutated by the address mutation server agent,
• wherein dual encryption communication is enabled so that the physical address capable of accessing the protection target server is not exposed to the outside.