Securely accessing remote sensors in critical infrastructures. - - PowerPoint PPT Presentation

securely accessing remote sensors in critical
SMART_READER_LITE
LIVE PREVIEW

Securely accessing remote sensors in critical infrastructures. - - PowerPoint PPT Presentation

Securely accessing remote sensors in critical infrastructures. SUPERVISORS: RESEARCH PROJECT 2 CEDRIC BOTH PAVLOS LONTORFOS JEROEN DO BOER 1 SECURITY AND NETWORK ENGINEERING The use of sensors Transportation Power grid networks


slide-1
SLIDE 1

Securely accessing remote sensors in critical infrastructures.

RESEARCH PROJECT 2 PAVLOS LONTORFOS

SECURITY AND NETWORK ENGINEERING

1

SUPERVISORS: CEDRIC BOTH JEROEN DO BOER

slide-2
SLIDE 2

The use of sensors

  • Transportation
  • Power grid networks
  • Health sector
  • Smart home
  • Infrastructure monitoring

SECURITY AND NETWORK ENGINEERING

2

Various sectors where sensors are used. Source: Cisco IBSG, April 2011 Image

slide-3
SLIDE 3

Critical Infrastructure

Monitor infrastructure environment

  • Quality of Service
  • Hardware failure
  • Safety
  • Maintenance

Challenges

  • Often inaccessible
  • Expensive on-site visit
  • Time consuming to replace

SECURITY AND NETWORK ENGINEERING

3

slide-4
SLIDE 4

Research question

Can Software Defined Networks (SDN) improve the redundancy and security of a sensor network in critical infrastructure?

SECURITY AND NETWORK ENGINEERING

4

slide-5
SLIDE 5

Research question

Can Software Defined Networks (SDN) improve the redundancy and security of a sensor network in critical infrastructure? Devided in 3 subquestions:

  • How SDN affects redundancy

SECURITY AND NETWORK ENGINEERING

5

slide-6
SLIDE 6

Research question

Can Software Defined Networks (SDN) improve the redundancy and security of a sensor network in critical infrastructure? Devided in 3 subquestions:

  • How SDN affects redundancy
  • How SDN affects scalability

SECURITY AND NETWORK ENGINEERING

6

slide-7
SLIDE 7

Research question

Can Software Defined Networking (SDN) improve the redundancy and security of a sensor network in critical infrastructure? Divided in 3 sub questions:

  • How SDN affects redundancy
  • How SDN affects scalability
  • How SDN affects security

SECURITY AND NETWORK ENGINEERING

7

slide-8
SLIDE 8

Background

Software Defined Networks

  • Separation of control and data plane
  • Centralized control
  • Northbound and Southbound APIs

SECURITY AND NETWORK ENGINEERING

8

Simplified representation of SDN architecture. Source: https://www. sdxcentral.com/articles/contributed/the-sdn-gold-rush-to-the-northbound-api/2012/11/

slide-9
SLIDE 9

Background cont.

LoRa

  • RF modulation technology
  • Physical layer
  • Long Range low power
  • Fixed gateways
  • Network server

SECURITY AND NETWORK ENGINEERING

9

The network server connects sensors, gateways and end-user applications and ensures reliable and secure data routing all along the LoRaWAN network. Retrieved from “https://www.actility.com/lorawan-network- server/”

slide-10
SLIDE 10

Related Research

In 2014, Andrea Detti et al. published research with the benefits of an SDN- based implementation of a Wireless Mesh Networks(WMN)

  • Arbitrary paths for data flows
  • Improved traffic engineering algorithms

SECURITY AND NETWORK ENGINEERING

10

Source from research paper “Controller selection in a Wireless Mesh SDN under network partitioning and merging scenarios”

slide-11
SLIDE 11

Related Research

In 2017, Zhiwei Zhang et al. proposed an Efficient Software-Defined Wireless Sensor Network architecture

  • Stable and energy-efficient control plane
  • Reduce the control overhead

SECURITY AND NETWORK ENGINEERING

11

Source from research paper “ Software defined wireless sensor networks application opportunities for efficient network management: A survey”

slide-12
SLIDE 12

Methodology

  • Literature research
  • Select the appropriate hardware
  • Implement experiments in hardware
  • Evaluation of results

SECURITY AND NETWORK ENGINEERING

12

slide-13
SLIDE 13

Network control experiment

SECURITY AND NETWORK ENGINEERING

13

Network Function Virtualization

  • DHCP
  • NAT
  • IDS

OpenVSwitch (OVS) SDN Controller

  • Faucet controller

LoRa Gateways

  • Dragino Gateway
  • Raspberry Pi with LoRa shield

The Things Network

slide-14
SLIDE 14

Network control experiment

SECURITY AND NETWORK ENGINEERING

14

Centralized control, ACLs and QoS

  • Fine-grained control of the sensor

network

  • Load balance flows
  • Prioritize critical flows
slide-15
SLIDE 15

Network control experiment

SECURITY AND NETWORK ENGINEERING

15

Controller failure

  • Secondary takes over
  • If both fail, work as regular switch
  • Never lost connectivity to sensor

network server

slide-16
SLIDE 16

Network control experiment

SECURITY AND NETWORK ENGINEERING

16

Redundant sensor network server

  • Load balance between sensor

servers

  • Automate behavior using

northbound APIs

slide-17
SLIDE 17

Network control experiment cont.

SECURITY AND NETWORK ENGINEERING

17

Individual Sensor Handling

  • No control of individual sensors
  • Deep packet inspection firewall
slide-18
SLIDE 18

SECURITY AND NETWORK ENGINEERING

18

Switch failure experiment

Gateway or switch failure

  • Deploy backup LoRa gateways
  • Disable duplicate flows
  • Enable if failure happens
slide-19
SLIDE 19

SECURITY AND NETWORK ENGINEERING

19

Switch failure experiment

slide-20
SLIDE 20

Summary

SECURITY AND NETWORK ENGINEERING

20

Redundancy

  • Better control over the network
  • Automated countermeasures using APIs
  • Cost efficient hardware can lead to

redundant topologies

  • Prioritize critical flows

Scalability

  • Network Function Virtualization
  • Automated control though APIs
  • Cost efficient hardware
slide-21
SLIDE 21

Summary

SECURITY AND NETWORK ENGINEERING

21

Security

  • Improved monitoring centralized alerts

for events

  • Access lists (ACLs)
  • Easier configuration – less errors
slide-22
SLIDE 22

Conclusion

Can SDN improve redundancy

Yes, due to better control and automated countermeasures

Can SDN improve scalability

Yes, using virtualized network functions and northbound API

Can SDN improve security

Probably yes, due to easier monitoring of the network

Can Software Defined Networks (SDN) improve the redundancy and security of a sensor network in critical infrastructure? Yes

SECURITY AND NETWORK ENGINEERING

22

slide-23
SLIDE 23

Future Research

Virtualized Network Functions

  • Develop virtual functions aimed to sensor networks

Individual sensor handling for LoRa sensors

  • Ways to control individual sensors on network level

SECURITY AND NETWORK ENGINEERING

23

slide-24
SLIDE 24

Thank you for your attention!

SECURITY AND NETWORK ENGINEERING

24