通过SDN方式保护雾到云的组合系统

Sarang Kahvazadeh, Vitor Barbosa C. Souza, X. Masip-Bruin, E. Marín-Tordera, Jordi García, Rodrigo Díaz
{"title":"通过SDN方式保护雾到云的组合系统","authors":"Sarang Kahvazadeh, Vitor Barbosa C. Souza, X. Masip-Bruin, E. Marín-Tordera, Jordi García, Rodrigo Díaz","doi":"10.1145/3069383.3069385","DOIUrl":null,"url":null,"abstract":"Future IoT services execution may benefit from combining resources at cloud and at the edge. To that end, new architectures should be proposed to handle IoT services in a coordinated way at either the edge of the network, the cloud, or both. Reacting to that need, the Fog-to-Cloud concept has been recently proposed. A key aspect in the F2C design refers to security, since F2C raises security issues besides those yet unsolved in fog and cloud. Thus, we envision the need for new security strategies to handle all components in the F2C architecture. In this paper we propose an SDN-based (mater/slave) security architecture leveraging a centralized controller on the cloud, and distributed controllers at the edge of the network. We argue that the proposed architecture brings more security and privacy to the cloud users by reducing the distance between them and, therefore, reducing the risks of the so called man-in-the-middle attacks. The proposed security architecture is analyzed in some critical infrastructure scenarios in order to illustrate their potential benefits.","PeriodicalId":445825,"journal":{"name":"Proceedings of the 4th Workshop on CrossCloud Infrastructures & Platforms","volume":"64 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2017-04-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"33","resultStr":"{\"title\":\"Securing combined Fog-to-Cloud system Through SDN Approach\",\"authors\":\"Sarang Kahvazadeh, Vitor Barbosa C. Souza, X. Masip-Bruin, E. Marín-Tordera, Jordi García, Rodrigo Díaz\",\"doi\":\"10.1145/3069383.3069385\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Future IoT services execution may benefit from combining resources at cloud and at the edge. To that end, new architectures should be proposed to handle IoT services in a coordinated way at either the edge of the network, the cloud, or both. Reacting to that need, the Fog-to-Cloud concept has been recently proposed. A key aspect in the F2C design refers to security, since F2C raises security issues besides those yet unsolved in fog and cloud. Thus, we envision the need for new security strategies to handle all components in the F2C architecture. In this paper we propose an SDN-based (mater/slave) security architecture leveraging a centralized controller on the cloud, and distributed controllers at the edge of the network. We argue that the proposed architecture brings more security and privacy to the cloud users by reducing the distance between them and, therefore, reducing the risks of the so called man-in-the-middle attacks. The proposed security architecture is analyzed in some critical infrastructure scenarios in order to illustrate their potential benefits.\",\"PeriodicalId\":445825,\"journal\":{\"name\":\"Proceedings of the 4th Workshop on CrossCloud Infrastructures & Platforms\",\"volume\":\"64 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2017-04-23\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"33\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Proceedings of the 4th Workshop on CrossCloud Infrastructures & Platforms\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1145/3069383.3069385\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 4th Workshop on CrossCloud Infrastructures & Platforms","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3069383.3069385","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 33

摘要

未来的物联网服务执行可能受益于云和边缘资源的组合。为此,应该提出新的架构,以便在网络边缘、云或两者之间以协调的方式处理物联网服务。针对这种需求,最近提出了“雾到云”的概念。F2C设计的一个关键方面是安全性,因为除了雾和云中尚未解决的问题之外,F2C还提出了安全问题。因此,我们设想需要新的安全策略来处理F2C架构中的所有组件。在本文中,我们提出了一种基于sdn(主/从)的安全架构,利用云上的集中式控制器和网络边缘的分布式控制器。我们认为,所提出的架构通过缩短云用户之间的距离,从而为云用户带来更多的安全性和隐私性,从而降低了所谓的中间人攻击的风险。本文在一些关键的基础设施场景中分析了所提出的安全体系结构,以说明其潜在的好处。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Securing combined Fog-to-Cloud system Through SDN Approach
Future IoT services execution may benefit from combining resources at cloud and at the edge. To that end, new architectures should be proposed to handle IoT services in a coordinated way at either the edge of the network, the cloud, or both. Reacting to that need, the Fog-to-Cloud concept has been recently proposed. A key aspect in the F2C design refers to security, since F2C raises security issues besides those yet unsolved in fog and cloud. Thus, we envision the need for new security strategies to handle all components in the F2C architecture. In this paper we propose an SDN-based (mater/slave) security architecture leveraging a centralized controller on the cloud, and distributed controllers at the edge of the network. We argue that the proposed architecture brings more security and privacy to the cloud users by reducing the distance between them and, therefore, reducing the risks of the so called man-in-the-middle attacks. The proposed security architecture is analyzed in some critical infrastructure scenarios in order to illustrate their potential benefits.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信