A security‐driven network architecture for routing in industrial Internet of Things. Issue 4 (10th January 2021)

• Record Type: Journal Article
• Authors: Cao, Jian; Wang, Xingwei; Huang, Min; Yi, Bo; He, Qiang
• Is Part Of: Transactions on emerging telecommunications technologies. Volume 32:Issue 4(2021)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2021-01-10
• Subjects: Telecommunication -- Periodicals; 384.05
• DOI: 10.1002/ett.4216
• Languages: English
• ISSNs: 2161-5748

Abstract

Abstract: Industrial Internet of Things (IIoT), as the integration of industrial network and IoT, has attracted a lot of attention from both academia and industry. However, with such integration deepens, many issues suffered by the industrial networks are exposed and magnified. The secure routing is a key focus, since the industrial environment is extremely vulnerable and many potential threats (eg, distributed denial of service and selfish attacks) are introduced due to the connection to the Internet. In order to prevent the threats from the Internet and embrace the benefits of IIoT, a security‐driven network framework for routing is particularly designed. Specifically, we first leverage the technologies of software‐defined networking (SDN), network function virtualization (NFV), and blockchain to create the overall framework which is flexible, programmable, and secure. On one hand, the three‐level structure of SDN/NFV is applied to each domain, based on which we can flexibly control and program the underlying forwarding devices in this domain for the purpose of calculating the optimal routing policies. On the other hand, the blockchain is applied among different SDN controllers to create a trust and untamperable environment. Then, under this framework, a secure routing mechanism is proposed as well to prevent the attacks on the basis of node identity authentication and node behavior authentication. The simulation experiments are carried out on the OMNet++ platform and the experimental results indicate that the proposed mechanism outperforms the other state‐of‐the‐art methods in terms of scalability and robustness especially when encountering malicious attacks. Abstract : We particularly design a security framework for IIoT, which is built based on the technologies of SDN/NFV and blockchain. On one hand, the three‐layer structure of SDN/NFV is applied to each domain to achieve a flexible control and management. On the other hand, the blockchain is applied among different controllers to achieve a trust environment. Under this framework, a secure routing algorithm is proposed to calculate secure paths.