Enabling Cooperative IoT Security via Software Defined Networks (SDN)

Grigoryan, Garegin; Liu, Yaoqing; Njilla, Laurent; Kamhoua, Charles A.; Kwiat, Kevin

doi:10.1109/icc.2018.8423017

Cited by 15 publications

(8 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Their model was shown to achieve high performance in terms of latency and resource utilization; however, no intrusion detection analysis was performed. Grigoryan et al 38 proposed a cooperative IoT security model with SDN, where controller peers share information to mitigate detected attacks in IoT at a large scale. The proposed model was shown to achieve fast failover; however, no specific intrusion detection mechanisms were described.…”

Section: Related Workmentioning

confidence: 99%

ProtÉdge: A few‐shot ensemble learning approach to software‐defined networking‐assisted edge security

Demirpolat

Sarica

Angin

2020

Trans Emerging Tel Tech

View full text Add to dashboard Cite

The rise of the Internet of Things (IoT) paradigm has had a significant impact on our lives through many use cases including smart farming, smart homes, and smart healthcare among others. Due to the capacity-constrained nature of many IoT devices, edge computing has become a significant aid for IoT, replacing cloud computing to support the extremely low latency requirements. With the number of smart devices growing exponentially, the large attack surface created by these devices is concerning. Software-defined networking (SDN) based architectures come to the rescue of edge-assisted IoT environments to achieve enhanced security, and they strongly rely on intelligent decision-making capabilities to act upon the high volume of traffic they control. Machine learning-based intelligence is already utilized by these systems with successful results when abundant training data are available; however, most algorithms fail in the lack of sufficient training data. In this article, we propose ProtÉdge, an SDN-based intelligent security architecture for edge-assisted IoT networks, which utilizes a few-shot learning classifier, namely prototypical networks, for highly accurate detection of intrusions. We evaluate the performance of the proposed model with the Bot-IoT data set consisting of real-world IoT network flows, as well as an SDN data set modeling an edge-assisted IoT environment and the UNSW-NB15 data set, and show that the proposed model achieves significantly better performance than state-of-the-art models in the absence of large amounts of sample attacks. The proposed architecture is promising to achieve intelligent security in future's ubiquitous edge-enabled IoT with its low processing overhead and high intrusion detection accuracy.

show abstract

Section: Related Workmentioning

confidence: 99%

ProtÉdge: A few‐shot ensemble learning approach to software‐defined networking‐assisted edge security

Demirpolat

Sarica

Angin

2020

Trans Emerging Tel Tech

View full text Add to dashboard Cite

show abstract

“…A network level approach aimed at decoupling security for applications has also been addressed, to a certain extent, through Software Defined Network's (SDN) configurations. A reactive and coordinated response to certain attacks can be automated, providing a successful response when mitigating them in IoT environments, and protecting other devices before imminent attacks may happen [31].…”

Section: Related Work a Decoupling Security From Applicationsmentioning

confidence: 99%

IoTsafe, Decoupling Security From Applications for a Safer IoT

et al. 2019

View full text Add to dashboard Cite

The use of robust security solutions is a must for the Internet of Things (IoT) devices and their applications: regulators in different countries are creating frameworks for certifying those devices with an acceptable security level. However, even for already certified devices, security protocols have to be updated when a breach is found or a certain version becomes obsolete. Many approaches for securing IoT applications are nowadays based on the integration of a security layer [e.g., using transport layer security, (TLS)], but this may result in difficulties when upgrading the security algorithms, as the whole application has to be updated. This fact may shorten the life of IoT devices. As a way to overcome these difficulties, this paper presents IoTsafe, a novel approach relying on secure socket shell (SSH), a feasible alternative to secure communications in IoT applications based on hypertext transfer protocol (HTTP and HTTP/2). In order to illustrate its advantages, a comparison between the traditional approach (HTTP with TLS) and our scheme (HTTP with SSH) is performed over low-power wireless personal area networks (6loWPAN) through 802.15.4 interfaces. The results show that the proposed approach not only provides a more robust and easy-to-update solution, but it also brings an improvement to the overall performance in terms of goodput and energy consumption. Core server stress tests are also presented, and the server performance is also analyzed in terms of RAM consumption and escalation strategies.

show abstract

“…Software Defined Networking (SDN) came into limelight for managing the data centers with centralized view of the network infrastructure [3]. Owing to the advantages that SDN offers such as security, programmability, the researchers also explored to use of SDN in other areas like IoT, CPS, and enterprise network management in cloud [4] [5]. In particular, the network security solutions can be implemented to handle the Denial of Service (DoS), route hijacking , topology poisoning attacks using SDN [6] [7] [8].…”

Section: Introductionmentioning

confidence: 99%

Intelligent Network Layer for Cyber-Physical Systems Security

Chaganti

Gupta

Vemprala

2021

International Journal of Smart Security Technologies

View full text Add to dashboard Cite

The cyber-physical system (CPS) has made tremendous progress in recent years and also disrupting technical fields ranging from health, transportation, industries, and more. However, CPS security is still one of the concerns for wide adoption owing to the high number of devices connecting to the internet and the traditional security solutions may not be suitable to protect the advanced, application-specific attacks. This paper presents a programmable device network layer architecture to combat attacks and efficient network monitoring in heterogeneous environment CPS applications. The authors leverage industrial control systems (ICS) to discuss the existing issues, highlighting the importance of advanced network layers for CPS. The programmable data plane language (P4) is introduced to detect well known HELLO flood attacks with minimal effort in the network level and show that programmable switches are suitable to implement security solutions in CPS applications.

show abstract

Enabling Cooperative IoT Security via Software Defined Networks (SDN)

Cited by 15 publications

References 8 publications

ProtÉdge: A few‐shot ensemble learning approach to software‐defined networking‐assisted edge security

ProtÉdge: A few‐shot ensemble learning approach to software‐defined networking‐assisted edge security

IoTsafe, Decoupling Security From Applications for a Safer IoT

Intelligent Network Layer for Cyber-Physical Systems Security

Contact Info

Product

Resources

About