SDN/NFV security framework for fog‐to‐things computing infrastructure

Abstract

Summary Currently, core networking architectures are facing disruptive developments, due to emergence of paradigms such as Software‐Defined‐Networking (SDN) for control, Network Function Virtualization (NFV) for services, and so on. These are the key enabling technologies for future applications in 5G and locality‐based Internet of things (IoT)/wireless sensor network services. The proliferation of IoT devices at the Edge networks is driving the growth of all‐connected world of Internet traffic. In the Cloud‐to‐Things continuum, processing of information and data at the Edge mandates development of security best practices to arise within a fog computing environment. Service providers are transforming their business using NFV‐based services and SDN‐enabled networks. The SDN paradigm offers an easily programmable model, global view, and control for modern networks, which demand faster response to security incidents and dynamically enforce countermeasures to intrusions and cyberattacks. This article proposes an autonomic multilayer security framework called Distributed Threat Analytics and Response System (DTARS) for a converged architecture of Fog/Edge computing and SDN infrastructures, for emerging applications in IoT and 5G networks. The major detection scheme is deployed within the data plane, consisting of a coarse‐grained behavioral, anti‐spoofing, flow monitoring and fine‐grained traffic multi‐feature entropy‐based algorithms. We developed exemplary defense applications under DTARS framework, on a malware testbed imitating the real‐life DDoS/botnets such as Mirai. The experiments and analysis show that DTARS is capable of detecting attacks in real‐time with accuracy more than 95% under attack intensities up to 50 000 packets/s. The benign traffic forwarding rate remains unaffected with DTARS, while it drops down to 65% with traditional NIDS for advanced DDoS attacks. Further, DTARS achieves this performance without incurring additional latency due to data plane overhead.

Fog Intelligence for Secure Smart Villages: Architecture and Future Challenges

“…SDN is a network architecture paradigm that enables a network topology to be managed and programmed by software applications. As the SDN controller is considered the most important function of SDN architecture, the fog layer can utilize the SDN controller to provide the anomaly detection approach where the network traffic has to go through a fog node or a fog server, in which the SDN controller is hosted [10]. The detection and mitigation mechanism provides the controller with updated flow rules to segregate and disregard malicious traffic from legitimate traffic.…”

A novel IoT-based health and tactical analysis model with fog computing

“…Software Defined Network (SDN) and Network Function Virtualization (NFV) based structures were used to establish, secure, scale, increase efficiency and reduce the cost of the fog network (Krishnan, Duttagupta & Achuthan, 2020). SDN covered software-based technologies, models and protocols that make the global network smarter, more abstract and functional.…”

A Manifesto for Modern Fog and Edge Computing: Vision, New Paradigms, Opportunities, and Future Directions

“…Interlayer communication plays an important role for effective resource management to enable coordination amongst various tasks and subtasks going inside resource manager to perform resource provisioning and scheduling [42]. In fog-edge computing model, there is a requirement of an effective communication among various layers such as cloud, fog, edge and IoT as shown in Figure 1, which can improve the quality of service in terms response time and latency [43].…”