DVF-fog: distributed virtual firewall in fog computing based on risk analysis. (22nd July 2019)

• Record Type: Journal Article
• Authors: Kamoun-Abid, Ferdaous; Meddeb-Makhlouf, Amel; Zarai, Faouzi; Guizani, Mohsen
• Is Part Of: International journal of sensor networks. Volume 30:Number 4(2019)
• Page Start: 242
• Page End: 253
• Publication Date: 2019-07-22
• Subjects: fog computing -- access control -- distributed firewall -- risk analysis -- cooperative controller; Sensor networks -- Periodicals; 681.2
• Languages: English
• ISSNs: 1748-1279

Abstract

To eliminate network saturation during data exchanges, fog computing is deployed as the technology that benefits from both cloud computing and internet of things (IoT) paradigms. Therefore, we focus on network access control issues that are considered as grave challenges in a distributed environment such as fog/cloud computing. Therefore, we present an architecture for distributed fog with a divided topology into zones and implement distributed firewall/controller. This way, we can combine user-based access control and distributed network-based access control based on risk analysis and estimation. The simulation results show that our proposed technique improves the network performance in terms of throughput and blocking rate and it is able to prevent DDoS. Furthermore, the comparison with existing approaches based on the openstack framework illustrates that the fog-based distributed virtual firewall (DVF) approach decreases significantly the false positive rate (FPR) to be 0.0942% and increases the true positive rate (TPR) to be 99.9%.