IPS architecture for IoT networks overlapped in SDN

• Published in: 2019 Workshop on Communication Networks and Power Systems (WCNPS) pp. 1 - 6
• Main Authors: Goncalves, Daniel G. V., de Caldas Filho, Francisco L., Martins, Lucas M. C. E, de O. Kfouri, Guilherme, Dutra, Bruno V., de O. Albuquerque, Robson, de Sousa, Rafael T.
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.10.2019
• Subjects: Computer architecture; Firewalls (computing); Internet of Things; Intrusion Detection System; Intrusion Prevention System; IP networks; Power systems; Prevention and mitigation; Security; Software Defined Network; Software defined networking; Switches; Volume measurement
• DOI: 10.1109/WCNPS.2019.8896297

The programmability resulting from the Software Defined Networking (SDN) approach facilitates the integration of the functionalities of firewalls, Intrusion Prevention Systems (IPS) and switching gear, allowing fast reconfiguration of the network in case of anomaly detection. In this paper, the proposed architecture aims to structure a distributed security measure integrating firewall, IPS, switches and a controller entity to support Internet of Things (IoT) instances, allowing the identification of anomalous behavior of IoT devices by the IPS, thus leading the SDN to block the attacks as near as possible to the sources, reducing the volume of malicious traffic and isolating the infected device from the rest of the network.