No abstract

With near exponential growth predicted in the number of Internet of Things (IoT) based devices within networked systems there is need of a means of providing their flexible and secure integration. Software Defined Networking (SDN) is a concept that allows for the centralised control and configuration of network devices, and also provides opportunities for the dynamic control of network traffic. This paper proposes the use of an SDN gateway as a distributed means of monitoring the traffic originating from and directed to IoT based devices. This gateway can then both detect anomalous behaviour and perform an appropriate response (blocking, forwarding, or applying Quality of Service). Initial results demonstrate that, while the addition of the attack detection functionality has an impact on the number of flow installations possible per second, it can successfully detect and block TCP and ICMP flood based attacks.

The predicted prevalence of both Internet of Things (IoT) based devices and the concept of Software Defined Networking (SDN) as a new paradigm in networking, means that consideration is required for how they will interact. Current SDN implementations operate on the principle that on receiving an unrecognised packet, a switch will query a centralised controller for a corresponding rule. Memory limitations within current switch devices dictate that this rule can only be stored for a short period of time before being removed, thus making it likely that the relatively infrequent data samples sent from IoT devices will have a transmission interval longer than this timeout. This paper proposes a Pre-emptive Flow Installation Mechanism (PFIM) that dynamically learns the transmission intervals of periodic network flows and installs the corresponding rules within a switch, prior to the arrival of a packet. A proof-ofconcept implementation shows this to have a significant effect on reducing the delay experienced by these flows.

No abstract

No abstract