A Hybrid Entropy and Blockchain Approach for Network Security Defense in SDN-Based IIoT
作者机构：School of Computer Science Nanjing University of Information Science and Technology
出 版 物：《Chinese Journal of Electronics》 (电子学报(英文))
年 卷 期：2023年第32卷第3期
页 面：531-541页
核心收录：
学科分类：12[管理学] 1201[管理学-管理科学与工程(可授管理学、工学学位)] 0808[工学-电气工程] 0839[工学-网络空间安全] 08[工学]
基 金：supported in part by the National Natural Science Foundation of China (61802196, 61872082, 61472184) the Natural Science Foundation of Jiangsu Province (BK20180791) the Engineering Research Center of Digital Forensics,Ministry of Education
主 题：Smart contracts Network security Network architecture Denial-of-service attack Entropy Blockchains Software defined networking
摘 要：In the industrial Internet of things(IIoT), various applications generate a large number of interactions and are vulnerable to various attacks, which are difficult to be monitored in a sophisticated way by traditional network architectures. Therefore, deploying software-defined network(SDN) in IIoT is essential to defend against various attacks. However, SDN has a drawback: there is a security problem of distributed denial-ofservice(DDoS) attacks at the control layer. This paper proposes an effective solution: DDoS detection within the domain using tri-entropy in information theory. The detected attacks are then uploaded to a smart contract in the blockchain, so that the attacks can be quickly cut off even if the same attack occurs in different domains. Experimental validation was conducted under different attack strengths and multiple identical attacks, and the results show that the method has better detection ability under different attack strengths and can quickly block the same attacks.
同方期刊数据库