Detection and Mitigation of DoS and DDoS Attacks in IoT-Based Stateful SDN: An Experimental Approach

Sensors

Javier Carmona-Murillo¹  Jesús Galeano-Brajones¹  JuanF. Valenzuela-Valdés²  Francisco Luna-Valero³ 

[1] Department of Computing and Telematics Engineering, Universidad de Extremadura, 06800 Mérida, Spain;Department of Signal Theory, Telematics and Communications, Universidad de Granada, 18071 Granada, Spain;ITIS Software, Universidad de Málaga, 29071 Málaga, Spain;

关键词: stateful sdn;    dos;    ddos;    entropy;    internet of things;    experimental evaluation;   

DOI  :  10.3390/s20030816

来源: DOAJ

【 摘 要 】

The expected advent of the Internet of Things (IoT) has triggered a large demand of embedded devices, which envisions the autonomous interaction of sensors and actuators while offering all sort of smart services. However, these IoT devices are limited in computation, storage, and network capacity, which makes them easy to hack and compromise. To achieve secure development of IoT, it is necessary to engineer scalable security solutions optimized for the IoT ecosystem. To this end, Software Defined Networking (SDN) is a promising paradigm that serves as a pillar in the fifth generation of mobile systems (5G) that could help to detect and mitigate Denial of Service (DoS) and Distributed DoS (DDoS) threats. In this work, we propose to experimentally evaluate an entropy-based solution to detect and mitigate DoS and DDoS attacks in IoT scenarios using a stateful SDN data plane. The obtained results demonstrate for the first time the effectiveness of this technique targeting real IoT data traffic.

【 授权许可】

Unknown