Semantic-Aware Security Orchestration in SDN/NFV-Enabled IoT Systems.

Area of Science:

• Computer Science
• Network Security
• Internet of Things

Background:

• Internet of Things (IoT) systems benefit from Network Function Virtualization (NFV) and Software-Defined Networking (SDN) for flexibility and resilience.
• Existing security frameworks face challenges with policy inconsistencies in dynamic SDN/NFV-aware IoT environments.
• Automated security orchestration is crucial for self-protection and self-healing in complex IoT systems.

Purpose of the Study:

• To present a semantic-aware, zero-touch, and policy-driven security orchestration framework for SDN/NFV-aware IoT.
• To enable autonomic and conflict-less security orchestration by dynamically detecting semantic inconsistencies.
• To optimize the allocation and Service Function Chaining (SFC) of Virtual network Security Functions (VSF) for enhanced Quality of Service (QoS) and resource utilization.

Main Methods:

• Developed a framework leveraging Semantic technologies for dynamic conflict detection in security policies and IoT system models.
• Implemented an optimized SFC algorithm for efficient VSF allocation, considering QoS, security, and resource usage.
• Utilized a policy-driven approach for zero-touch orchestration of security policies and Virtual Network Functions (VNFs)/VSFs.

Main Results:

• The framework successfully detects semantic conflicts in security policies during orchestration.
• The optimized SFC algorithm demonstrates effective VSF allocation, maximizing QoS and resource utilization.
• Validated the feasibility and performance of the proposed security orchestration framework through implementation.

Conclusions:

• The semantic-aware framework provides autonomic and conflict-less security orchestration for SDN/NFV-aware IoT systems.
• Dynamic conflict detection and optimized VSF allocation significantly enhance IoT system security and performance.
• The approach offers a robust solution for managing security in complex and evolving IoT environments.