An SDN/NFV based Intelligent Fog Architecture for DDoS Defense in Cyber Physical Systems
Manish Snehi, Abhinav Bhandari · 2021
The Internet of Things (IoT) has garnered considerable interest in recent years as its technical capabilities have facilitated the creation of a diverse variety of commercial revenue models and services (e.g., medical cyber-physical systems, smart agriculture, Industry 4.0, smart cities, etc.). However, the security gaps in intelligent systems continue to be a significant source of concern. Malevolent attackers employ attacks like distributed denial of service (DDoS) to weaken system availability. To mitigate attack traffic, adopting a modern Software-defined Networked backbone and Network Function Virtualization (NFV) paradigm has proven to be a potential approach. This paper offers a comprehensive examination of the cutting-edge defense solutions driven by contemporary SDN/NFV technologies, highlighting the key limitations and future scope. The paper also presents the multi-dimensional view of the defense architecture by examining the Internet of Things (IoT) scenarios, defense strategies, the role of Fog to overcome research gaps, and leveraging SDN/NFV architecture for an intelligent defense solution. Furthermore, the paper examines the profound network backbone and offers the intelligent Machine and Deep learning-based distributed DDoS defense solution deployed in the Fog layer. The article concludes with an evaluation of open issues and research prospects for vulnerability apprehension in Smart systems. Keywords—SDN, Software Defined Network, NFV, Network Functions Virtualization, Cloud, IoT, Fog Computing, Distributed Denial of Service, DDoS