检索结果-南通市图书馆

Towards a blockchain-SDN-based secure architecture for cloud computing in smart industrial IoT

Digital Communications and Networks 2023年第2期9卷 411-421页

作者： Anichur Rahman Md Jahidul Islam Shahab S.Band Ghulam Muhammad Kamrul Hasan Prayag Tiwari Department of Computer Science and Engineering National Institute of Textile Engineering and Research(NITER)Constituent Institute of the University of DhakaSavarDhaka1350Bangladesh Department of Computer Science and Engineering Green University of BangladeshDhakaBangladesh Future Technology Research Center College of FutureNational Yunlin University of Science and TechnologyDouliouTaiwanChina Department of Computer Engineering College of Computer and Information SciencesKing Saud UniversityRiyadhSaudi Arabia Department of Information and Communication Engineering Hankuk University of Foreign StudiesSouth Korea Department of Computer Science Aalto UniversityFinland

Some of the significant new technologies researched in recent studies include BlockChain(BC),Software Defined Networking(SDN),and Smart Industrial Internet of Things(IIoT).All three technologies provide data integrity,confidentiality,and integrity in their respective use cases(especially in industrial fields).Additionally,cloud computing has been in use for several years now.Confidential information is exchanged with cloud infrastructure to provide clients with access to distant resources,such as computing and storage activities in the IIoT.There are also significant security risks,concerns,and difficulties associated with cloud computing.To address these challenges,we propose merging BC and SDN into a cloud computing platform for the IIoT.This paper introduces“DistB-SDCloud”,an architecture for enhanced cloud security for smart IIoT applications.The proposed architecture uses a distributed BC method to provide security,secrecy,privacy,and integrity while remaining flexible and scalable.Customers in the industrial sector benefit from the dispersed or decentralized,and efficient environment of BC.Additionally,we described an SDN method to improve the durability,stability,and load balancing of cloud infrastructure.The efficacy of our SDN and BC-based implementation was experimentally tested by using various parameters including throughput,packet analysis,response time,bandwidth,and latency analysis,as well as the monitoring of several attacks on the system itself.

关键词： Smart IIoT Blockchain SDN IoT Security Privacy OpenFlow SDN-Controller Data security Cloud computing Cloud management

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

IQR-based approach for DDoS detection and mitigation in SDN

引用

Defence Technology（防务技术） 2023年第7期25卷 76-87页

作者： Rochak Swami Mayank Dave Virender Ranga Department of Computer Engineering National Institute of TechnologyKurukshetraIndia Department of Information Technology Delhi Technological UniversityDelhiIndia

Software-defined networking(SDN) is a trending networking paradigm that focuses on decoupling of the control logic from the data plane. This decoupling brings programmability and flexibility for the network management by introducing centralized infrastructure. The complete control logic resides in the controller, and thus it becomes the intellectual and most important entity of the SDN infrastructure. With these advantages, SDN faces several security issues in various SDN layers that may prevent the growth and global adoption of this groundbreaking technology. Control plane exhaustion and switch buffer overflow are examples of such security issues. Distributed denial-of-service(DDoS) attacks are one of the most severe attacks that aim to exhaust the controller’s CPU to discontinue the whole functioning of the SDN network. Hence, it is necessary to design a quick as well as accurate detection scheme to detect the attack traffic at an early stage. In this paper, we present a defense solution to detect and mitigate spoofed flooding DDoS attacks. The proposed defense solution is implemented in the SDN controller. The detection method is based on the idea of an statistical measure — Interquartile Range(IQR). For the mitigation purpose, the existing SDN-in-built capabilities are utilized. In this work, the experiments are performed considering the spoofed SYN flooding attack. The proposed solution is evaluated using different performance parameters, i.e., detection time, detection accuracy, packet_in messages, and CPU utilization. The experimental results reveal that the proposed defense solution detects and mitigates the attack effectively in different attack scenarios.

关键词： SDN DdoS IQR Controller CPU utilization Packet_in

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Mobility-Aware Caching Strategy in an SDN-Based Cooperative Caching Network

引用

中国通信:英文版 2023年第9期20卷 196-214页

作者： Qi Li Xiaoxiang Wang Dongyu Wang Information and Communication Engineering Beijing University of TechnologyBeijing 100124China Beijing University of Posts and Telecommunications Beijing 100876China

The upsurge of mobile multimedia traf-fic puts a heavy burden on the cellular network,and wireless caching has emerged as a powerful tech-nique to overcome the backhaul bottleneck and al-leviate the network burden.However,most previ-ous works ignored user mobility,thus not reaping the caching gain from user mobility and having lim-ited practical applications.In this paper,a mobility-aware caching strategy for the software-defined net-work(SDN)-based network is studied.Firstly,since typical mobile user(MU)has multiple opportunities to connect with the nearby MUs and Small-base stations(SBSs),the contact times between MUs as well as be-tween MU and SBSs are derived as the Poisson distri-bution and Gamma distribution.Secondly,we propose a two-tier cooperative caching strategy,where SBSs cache the rateless Fountain code encoded video blocks probabilistically and nonrepeatedly while MUs just store the whole encoded video received last time.The corresponding four-stage transmission process is ana-lyzed,where the key intermediate step is the deriva-tion of the service and the failing probabilities of each transmission manner.Finally,we derive the success-ful offloading rate and average data offloading ra-tio(ADOR)as performance metrics.A system op-timization problem based on ADOR is formulated,and two solutions are proposed,namely,derivativebased solution(DB-Solution)and long-tail distribution approximation(LTD-Approximation).Simulation results demonstrate that the effectiveness of LTDApproximation is similar to the DB-Solution,and the proposed caching strategy can achieve quasi-optimal performance compared with other contrast schemes.

关键词： wireless caching mobility SDN

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

云环境下面向“虚实融合”网络的SDN构建方法

引用

计算机工程与应用 2023年第3期59卷 234-243页

作者：陈宇韩久江刘建鲜明王会梅张宇翔国防科技大学电子科学学院长沙410073

在网络仿真实验场景的构建中,复杂实体终端难以实现虚拟仿真,需要对实体终端进行接入,但现有接入方式部署复杂、网络性能存在瓶颈、不能适用于大规模网络场景。为有效解决上述问题,提出了一种基于SDN(softwaredefined-network)的虚实融... 详细信息

在网络仿真实验场景的构建中,复杂实体终端难以实现虚拟仿真,需要对实体终端进行接入,但现有接入方式部署复杂、网络性能存在瓶颈、不能适用于大规模网络场景。为有效解决上述问题,提出了一种基于SDN(softwaredefined-network)的虚实融合网络仿真构建方法,利用SDN控制器结合流表构造算法实现对虚实网络的链路管理和数据连通,并设计开发了一套用于虚实融合网络仿真的原型系统,通过SDN控制器实现云平台中虚拟实例与云外实体终端共同组网,构建虚实融合的网络仿真实验场景。利用该原型系统,实验证明了基于SDN的网络仿真方法可以实现云平台中虚拟实例与实体终端高效大规模组网,且具有良好的网络性能。

关键词：云计算网络仿真 SDN 虚实融合 OpenStack

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

SDN Based DDos Mitigating Approach Using Traffic Entropy for IoT Network

引用

Computers, Materials & Continua 2022年第3期70卷 5651-5665页

作者： Muhammad Ibrahim Muhammad Hanif Shabir Ahmad Faisal Jamil Tayyaba Sehar YunJung Lee DoHyeun Kim Department of Computer Engineering Jeju National UniversityJeju-siJeju Special Self-Governing Province63243Korea Virtual University Islamabad Pakistan Department of IT Convergence Engineering Gachon UniversitySujeong-GuSeongnam-SiGyeonggi-Do461-701Korea Department of Computer Science and Statistics Jeju National UniversityKorea

The Internet of Things(IoT)has been widely adopted in various domains including smart cities,healthcare,smart factories,etc.In the last few years,the fitness industry has been reshaped by the introduction of smart fitness solutions for individuals as well as fitness gyms.The IoT fitness devices collect trainee data that is being used for various decision-making.However,it will face numerous security and privacy issues towards its realization.This work focuses on IoT security,especially DoS/DDoS attacks.In this paper,we have proposed a novel blockchain-enabled protocol(BEP)that uses the notion of a self-exposing node(SEN)approach for securing fitness IoT applications.The blockchain and SDN architectures are employed to enhance IoT security by a highly preventive security monitoring,analysis and response system.The proposed approach helps in detecting the DoS/DDoS attacks on the IoT fitness system and then mitigating the attacks.The BEP is used for handling Blockchain-related activities and SEN could be a sensor or actuator node within the fitness IoT system.SEN provides information about the inbound and outbound traffic to the BEP which is used to analyze the DoS/DDoS attacks on the fitness IoT system.The SENcalculates the inbound and outbound traffic features’entropies and transmits them to the Blockchain in the form of transaction blocks.The BEP picks the whole mined blocks’transactions and transfers them to the SDN controller node.The controller node correlates the entropies data of SENs and decides about the DoS or DDoS attack.So,there are two decision points,one is SEN,and another is the controller.To evaluate the performance of our proposed system,several experiments are performed and results concerning the entropy values and attack detection rate are obtained.The proposed approach has outperformed the other two approaches concerning the attack detection rate by an increase of 11%and 18%against Approach 1 and Approach 2 respectively.

关键词： SDN control plane load balancing decision tree CPU utilization

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Certrust:An SDN-Based Framework for the Trust of Certificates against Crossfire Attacks in IoT Scenarios

引用

工程与科学中的计算机建模（英文） 2023年第3期134卷 2137-2162页

作者： Lei Yan Maode Ma Dandan Li Xiaohong Huang Yan Ma Kun Xie School of Computer Science(National Pilot Software Engineering School) Beijing University of Posts and TelecommunicationsBeijingChina College of Engineering QatarUniversityDohaQatar

The low-intensity attack flows used by Crossfire attacks are hard to distinguish from legitimate flows.Traditional methods to identify the malicious flows in Crossfire attacks are rerouting,which is based on statistics.In these existing mechanisms,the identification of malicious flows depends on the IP address.However,the IP address is easy to be changed by attacks.Comparedwith the IP address,the certificate ismore challenging to be tampered with or forged.Moreover,the traffic trend in the network is towards encryption.The certificates are popularly utilized by IoT devices for authentication in encryption protocols.DTLShps proposed a new way to verify certificates for resource-constrained IoT devices by using the SDN controller.Based on DTLShps,the SDN controller can collect statistics on certificates.In this paper,we proposeCertrust,a framework based on the trust of certificates,tomitigate the Crossfire attack by using SDN for IoT.Our goal is threefold.First,the trust model is built based on the Bayesian trust system with the statistics on the participation of certificates in each Crossfire attack.Moreover,the forgetting curve is utilized instead of the traditional decay method in the Bayesian trust system for achieving a moderate decay rate.Second,for detecting the Crossfire attack accurately,a method based on graph connectivity is proposed.Third,several trust-based routing principles are proposed tomitigate the Crossfire attack.These principles can also encourage users to use certificates in communication.The performance evaluation shows that Certrust is more effective in mitigating the Crossfire attack than the traditional rerouting schemes.Moreover,our trust model has a more appropriate decay rate than the traditional methods.

关键词： Trust model certificate SDN Crossfire attack bayesian trust system forgetting curve IoT

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

QoS Routing Optimization Based on Deep Reinforcement Learning in SDN

引用

Computers, Materials & Continua 2024年第5期79卷 3007-3021页

作者： Yu Song Xusheng Qian Nan Zhang WeiWang Ao Xiong State Key Laboratory of Networking and Switching Technology Beijing University of Posts and TelecommunicationsBeijing100876China Marketing Service Center State Grid Jiangsu Electric Power Co.Ltd.Nanjing220000China Customer Service Center State Grid Co.Ltd.Nanjing211161China

To enhance the efficiency and expediency of issuing e-licenses within the power sector, we must confront thechallenge of managing the surging demand for data traffic. Within this realm, the network imposes stringentQuality of Service (QoS) requirements, revealing the inadequacies of traditional routing allocation mechanismsin accommodating such extensive data flows. In response to the imperative of handling a substantial influx of datarequests promptly and alleviating the constraints of existing technologies and network congestion, we present anarchitecture forQoS routing optimizationwith in SoftwareDefinedNetwork (SDN), leveraging deep reinforcementlearning. This innovative approach entails the separation of SDN control and transmission functionalities, centralizingcontrol over data forwardingwhile integrating deep reinforcement learning for informed routing decisions. Byfactoring in considerations such as delay, bandwidth, jitter rate, and packet loss rate, we design a reward function toguide theDeepDeterministic PolicyGradient (DDPG) algorithmin learning the optimal routing strategy to furnishsuperior QoS provision. In our empirical investigations, we juxtapose the performance of Deep ReinforcementLearning (DRL) against that of Shortest Path (SP) algorithms in terms of data packet transmission delay. Theexperimental simulation results show that our proposed algorithm has significant efficacy in reducing networkdelay and improving the overall transmission efficiency, which is superior to the traditional methods.

关键词： Deep reinforcement learning SDN route optimization QoS

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Unprecedented Smart Algorithm for Uninterrupted SDN Services During DDoS Attack

引用

Computers, Materials & Continua 2022年第1期70卷 875-894页

作者： Muhammad Reazul Haque Saw Chin Tan Zulfadzli Yusoff Kashif Nisar Rizaludin Kaspin Iram Haider Sana Nisar J.P.C.Rodrigues Bhawani Shankar Chowdhry Muhammad AslamUqaili Satya Prasad Majumder Danda B.Rawat Richard Etengu Rajkumar Buyya Faculty of Computing&Informatics Multimedia UniversityPersiaranMultimediaCyberjaya63100SelangorMalaysia Faculty of Engineering Multimedia UniversityPersiaran MultimediaCyberjaya63100SelangorMalaysia Faculty of Computing and Informatics University Malaysia SabahJalan UMSKota Kinabalu Sabah88400Malaysia Telekom Malaysia Research&Development TM Innovation Centre63000CyberjayaSelangorMalaysia Federal University of Piauí(UFPI) TeresinaPIBrazil Instituto de Telecomunica珲es 6201-001Covilh?Portugal National Center of Robotics and Automation-Condition Monitoring Systems Lab MUETJamshoroPakistan Department of Electrical and Electronic Engineering BUETDhaka1205Bangladesh Department of Electrical Engineering and Computer Science Data Science and Cybersecurity CenterHoward UniversityWashingtonDCUSA Cloud Computing and Distributed Systems(CLOUDS)Laboratory School of Computing and Information SystemsThe University of MelbourneMelbourneVIC 3053Australia

In the design and planning of next-generation Internet of Things(IoT),telecommunication,and satellite communication systems,controller placement is crucial in software-defined networking(SDN).The programmability of the SDN controller is sophisticated for the centralized control system of the entire network.Nevertheless,it creates a significant loophole for the manifestation of a distributed denial of service(DDoS)attack straightforwardly.Furthermore,recently a Distributed Reflected Denial of Service(DRDoS)attack,an unusual DDoS attack,has been detected.However,minimal deliberation has given to this forthcoming single point of SDN infrastructure failure problem.Moreover,recently the high frequencies of DDoS attacks have increased dramatically.In this paper,a smart algorithm for planning SDN smart backup controllers under DDoS attack scenarios has proposed.Our proposed smart algorithm can recommend single or multiple smart backup controllers in the event of DDoS occurrence.The obtained simulated results demonstrate that the validation of the proposed algorithm and the performance analysis achieved 99.99%accuracy in placing the smart backup controller under DDoS attacks within 0.125 to 46508.7 s in SDN.

关键词： SDN smart algorithm RTZLK-DAASCP DDoS attack DRDoS

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

SDN-based dynamic resource management and scheduling for cognitive industrial IoT

引用

International Journal of Intelligent Computing and Cybernetics 2022年第3期15卷 425-437页

作者： S.Chandramohan M.Senthilkumaran ECE Sri Chandrasekharendra Saraswathi Vishwa MahavidyalayaKanchipuramIndia CSE Sri Chandrasekharendra Saraswathi Vishwa MahavidyalayaKanchipuramIndia

Purpose-In recent years,it is imperative to establish the structure of manufacturing industry in the context of smart factory.Due to rising demand for exchange of information with various devices,and huge number of sensor nodes,the industrial wireless networks(IWNs)face network congestion and inefficient task scheduling.For this purpose,software-defined network(SDN)is the emerging technology for IWNs,which is integrated into cognitive industrial Internet of things for dynamic task scheduling in the context of industry 4.0.Design/methodology/approach-In this paper,the authors present SDN based dynamic resource management and scheduling(DRMS)for effective devising of the resource utilization,scheduling,and hence successful transmission in a congested medium.Moreover,the earliest deadline first(EDF)algorithm is introduced in authors’proposed work for the following criteria’s to reduce the congestion in the network and to optimize the packet loss.Findings-The result shows that the proposed work improves the success ratio versus resource usage probability and number of nodes versus successful joint ratio.At last,the proposed method outperforms the existing myopic algorithms in terms of query response time,energy consumption and success ratio(packet delivery)versus number of increasing nodes,respectively.Originality/value-The authors proposed a priority based scheduling between the devices and it is done by the EDF approach.Therefore,the proposed work reduces the network delay time and minimizes the overall energy efficiency.

关键词： SDN EDF Industry 4.0 IoT Task scheduling Myopic

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

AMulti-Constraint Path Optimization Scheme Based on Information Fusion in Software Defined Network

引用

Computers, Materials & Continua 2024年第4期79卷 1399-1418页

作者： Jinlin Xu Wansu Pan Longle Cheng Haibo Tan Munan Yuan Xiaofeng Li Hefei Institutes of Physical Science Chinese Academy of SciencesHefei230031China University of Science and Technology of China Hefei230026China

The existingmultipath routing in Software Defined Network (SDN) is relatively blind and inefficient, and there is alack of cooperation between the terminal and network sides, making it difficult to achieve dynamic adaptationof service requirements and network resources. To address these issues, we propose a multi-constraint pathoptimization scheme based on information fusion in SDN. The proposed scheme collects network topology andnetwork state information on the network side and computes disjoint paths between end hosts. It uses the FuzzyAnalytic Hierarchy Process (FAHP) to calculate the weight coefficients of multiple constrained parameters andconstructs a composite quality evaluation function for the paths to determine the priority of the disjoint paths. TheSDN controller extracts the service attributes by analyzing the packet header and selects the optimal path for flowrule forwarding. Furthermore, the service attributes are fed back to the path composite quality evaluation function,and the path priority is dynamically adjusted to achieve dynamic adaptation between service requirements andnetwork status. By continuously monitoring and analyzing the service attributes, the scheme can ensure optimalrouting decisions in response to varying network conditions and evolving service demands. The experimentalresults demonstrated that the proposed scheme can effectively improve average throughput and link utilizationwhile meeting the Quality of Service (QoS) requirements of various applications.

关键词： SDN multi-constraint path information fusion FAHP

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：