Enabling Virtual AAA Management in SDN-Based IoT Networks †

• DOI: 10.3390/s19020295
• Publication Date: 2019-01-14T17:20:07Z
• Authors: Alejandro Molina ...; Dan Garcia-Carrillo; Jorge Bernal Bernabe; Jordi Ortiz; Rafael Marin-Perez; Antonio Skarmeta
• Keywords: IoT; Chemical technology; TP1-1185; 02 engineering and technology; Article; SDN; NFV; channel protection; security policies; 0202 electrical engineering, electronic engineering, information engineering; bootstrapping; AAA

The increase of Software Defined Networks (SDN) and Network Function Virtualization (NFV) technologies is bringing many security management benefits that can be exploited at the edge Internet Things (IoT) networks to deal with cyber-threats. In this sense, paper presents evaluates a novel policy-based cyber-situational awareness framework for continuous dynamic Authentication, Authorization, Accounting (AAA) as well Channel Protection virtual functions in IoT enabled SDN/NFV. AAA, including network authenticators, are deployed VNF (Virtual Function) dynamically edge, order enable scalable device's bootstrapping managing access control devices network. addition, our solution allows distributing necessary crypto-keys Machine (M2M) communications deploy Channel-protection proxys VNFs, aim establishing secure tunnels among services, according contextual decisions inferred by cognitive framework. has been implemented evaluated, demonstrating its feasibility manage AAA channel protection SDN/NFV-enabled scenarios.