Reactive Security for SDN/NFV-enabled Industrial Networks leveraging Service Function Chaining

Petroulakis, N. E., Fysarakis, K., Askoxylakis, I. G. & Spanoudakis, G. (2017). Reactive Security for SDN/NFV-enabled Industrial Networks leveraging Service Function Chaining. Transactions on Emerging Telecommunications Technologies,

[img] Text - Accepted Version
Restricted to Repository staff only

Download (2MB) | Request a copy

Abstract

The innovative application of 5G core technologies, namely Software Defined Networking (SDN) and Network Function Virtualization (NFV), can help reduce capital and operational expenditures in industrial networks. Nevertheless, SDN expands the attack surface of the communication infrastructure, thus necessitating the introduction of additional security mechanisms. These major changes could not leave the industrial environment unaffected, with smart industrial deployments gradually becoming a reality; a trend that is often referred to as the 4th industrial revolution or Industry 4.0. A wind park is a good example of an industrial application relying on a network with strict performance, security, and reliability requirements, and was chosen as a representative example of industrial systems. This work highlights the benefit of leveraging the flexibility of SDN/NFV-enabled networks to deploy enhanced, reactive security mechanisms for the protection of the industrial network, via the use of Service Function Chaining. Moreover, the implementation of a proof-of-concept reactive security framework for an industrial-grade wind park network is presented, along with a performance evaluation of the proposed approach. The framework is equipped with SDN and Supervisory Control and Data Acquisition (SCADA) honeypots, modelled on and deployable to the wind park, allowing continuous monitoring of the industrial network and detailed analysis of potential attacks, thus isolating attackers and enabling the assessment of their level of sophistication. Moreover, the applicability of the proposed solutions is assessed in the context of the specific industrial application, based on the analysis of the network characteristics and requirements of an actual, operating wind park.

Item Type: Article
Additional Information: This is the pre-peer reviewed version of the following article: Petroulakis, N. E., Fysarakis, K., Askoxylakis, I. G. & Spanoudakis, G. (2017). Reactive Security for SDN/NFV-enabled Industrial Networks leveraging Service Function Chaining. Transactions on Emerging Telecommunications Technologies, which is to be published in final form at http://onlinelibrary.wiley.com/journal/10.1002/(ISSN)2161-3915. This article may be used for non-commercial purposes in accordance with Wiley Terms and Conditions for Self-Archiving.
Divisions: School of Engineering & Mathematical Sciences > Engineering
URI: http://openaccess.city.ac.uk/id/eprint/18581

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year

View more statistics