Research Repository

Securing SDN controlled IoT Networks Through Edge-Blockchain

Hu, Jiejun and Reed, Martin and Thomos, Nikolaos and Al-Naday, Mays F and Yang, Kun (2021) 'Securing SDN controlled IoT Networks Through Edge-Blockchain.' IEEE Internet of Things Journal, 8 (4). pp. 2102-2115. ISSN 2327-4662

[img]
Preview
Text
IoTJ_Securing_SDN_Controlled_IoT_Networks_Through_Edge_Blockchain.pdf - Accepted Version

Download (7MB) | Preview

Abstract

The Internet of Things (IoT) connected by Software Defined Networking (SDN) promises to bring great benefits to cyber-physical systems. However, the increased attack surface offered by the growing number of connected vulnerable devices and separation of SDN control and data planes could overturn the huge benefits of such a system. This paper addresses the vulnerability of the trust relationship between the control and data planes. To meet this aim, we propose an edge computing based blockchain-as-a-service (BaaS), enabled by an external BaaS provider. The proposed solution provides verification of inserted flows through an efficient, edge-distributed, blockchain solution. We study two scenarios for the blockchain reward purpose: (a) information symmetry, in which the SDN operator has direct knowledge of the real effort spent by the BaaS provider; and (b) information asymmetry, in which the BaaS provider controls the exposure of information regarding spent effort. The latter yields the so called “moral hazard”, where the BaaS may claim higher than actual effort. We develop a novel mathematical model of the edge BaaS solution; and propose an innovative algorithm of a fair reward scheme based on game theory that takes into account moral hazard. We evaluate the viability of our solution through analytical simulations. The results demonstrate the ability of the proposed algorithm to maximize the joint profits of the BaaS and the SDN operator, i.e. maximizing the social welfare.

Item Type: Article
Uncontrolled Keywords: Blockchain; Security; Internet of Things; Edge computing; Computer architecture; Task analysis; Cloud computing; flow verification and validation; reward scheme; software-defined networking (SDN)
Divisions: Faculty of Science and Health
Faculty of Science and Health > Computer Science and Electronic Engineering, School of
SWORD Depositor: Elements
Depositing User: Elements
Date Deposited: 20 Aug 2020 11:07
Last Modified: 23 Sep 2022 19:42
URI: http://repository.essex.ac.uk/id/eprint/28529

Actions (login required)

View Item View Item