In this paper,we focus on providing data provenance auditing schemes for distributed denial of service(DDoS)defense in intelligent internet of things(IoT).To achieve effective DDoS defense,we introduce a two-layer col...In this paper,we focus on providing data provenance auditing schemes for distributed denial of service(DDoS)defense in intelligent internet of things(IoT).To achieve effective DDoS defense,we introduce a two-layer collaborative blockchain framework to support data auditing.Specifically,using data scattered among intelligent IoT devices,switch gateways self-assemble a layer of blockchain in the local autonomous system(AS),and the main chain with controller participation can be aggregated by its associated layer of blocks once a cycle,to obtain a global security model.To optimize the processing delay of the security model,we propose a process of data pre-validation with the goal of ensuring data consistency while satisfying overhead requirements.Since the flood of identity spoofing packets,it is difficult to solve the identity consistency of data with traditional detection methods,and accountability cannot be pursued afterwards.Thus,we proposed a Packet Traceback Telemetry(PTT)scheme,based on in-band telemetry,to solve the problem.Specifically,the PTT scheme is executed on the distributed switch side,the controller to schedule and select routing policies.Moreover,a tracing probabilistic optimization is embedded into the PTT scheme to accelerate path reconstruction and save device resources.Simulation results show that the PTT scheme can reconstruct address spoofing packet forward path,reduce the resource consumption compared with existing tracing scheme.Data tracing audit method has fine-grained detection and feasible performance.展开更多
Link flooding attack(LFA)is a fresh distributed denial of service attack(DDoS).Attackers can cut off the critical links,making the services in the target area unavailable.LFA manipulates legal lowspeed flow to flood c...Link flooding attack(LFA)is a fresh distributed denial of service attack(DDoS).Attackers can cut off the critical links,making the services in the target area unavailable.LFA manipulates legal lowspeed flow to flood critical links,so traditional technologies are difficult to resist such attack.Meanwhile,LFA is also one of the most important threats to Internet of things(IoT)devices.The introduction of software defined network(SDN)effectively solves the security problem of the IoT.Aiming at the LFA in the software defined Internet of things(SDN-IoT),this paper proposes a new LFA mitigation scheme ReLFA.Renyi entropy is to locate the congested link in the data plane in our scheme,and determines the target links according to the alarm threshold.When LFA is detected on the target links,the control plane uses the method based on deep reinforcement learning(DRL)to carry out traffic engineering.Simulation results show that ReLFA can effectively alleviate the impact of LFA in SDN IoT.In addition,the rerouting time of ReLFA is superior to other latest schemes.展开更多
Against the demand of intelligent greenhouse construction of facility agriculture,greenhouse environment monitoring system is developed.The system contains three-layer architecture: sensor network layer at the bottom,...Against the demand of intelligent greenhouse construction of facility agriculture,greenhouse environment monitoring system is developed.The system contains three-layer architecture: sensor network layer at the bottom,data transmission convergence layer in the middle and monitoring application layer on the top,which is different from design idea of the existing system architecture.The bottom layer uses ZigBee wireless communication technology to construct wireless sensor network,and node type contains coordinator,router and acquisition terminal.Acquisition terminal is distributed in each greenhouse to collect data and play the role of wireless transmission,and router plays the function of data forwarding as the bridge of acquisition terminal and coordinator.Middle layer is composed of monitoring software developed by Lab VIEW software of NI Company and coordinator,which is used to gather data from the bottom layer.The top layer is comprehensive monitoring platform developed by Java language,which is used to gather greenhouse data of all plantation bases in one region,thereby providing comprehensive information service for government,enterprise and farmer.Greenhouse environment monitoring system realizes data collection and sharing of greenhouse environment information(air temperature,air humidity,light intensity and carbon dioxide concentration).Via test verification,the system's operation is stable,with certain application value.展开更多
基金supported by the Fundamental Research Funds under Grant 2021JBZD204 and 2022RC006in part by the National Natural Science Foundation of China under Grant 62201029in part by the China Postdoctoral Science Foundation under Grant Grant BX20220029 and 2022M710007.
文摘In this paper,we focus on providing data provenance auditing schemes for distributed denial of service(DDoS)defense in intelligent internet of things(IoT).To achieve effective DDoS defense,we introduce a two-layer collaborative blockchain framework to support data auditing.Specifically,using data scattered among intelligent IoT devices,switch gateways self-assemble a layer of blockchain in the local autonomous system(AS),and the main chain with controller participation can be aggregated by its associated layer of blocks once a cycle,to obtain a global security model.To optimize the processing delay of the security model,we propose a process of data pre-validation with the goal of ensuring data consistency while satisfying overhead requirements.Since the flood of identity spoofing packets,it is difficult to solve the identity consistency of data with traditional detection methods,and accountability cannot be pursued afterwards.Thus,we proposed a Packet Traceback Telemetry(PTT)scheme,based on in-band telemetry,to solve the problem.Specifically,the PTT scheme is executed on the distributed switch side,the controller to schedule and select routing policies.Moreover,a tracing probabilistic optimization is embedded into the PTT scheme to accelerate path reconstruction and save device resources.Simulation results show that the PTT scheme can reconstruct address spoofing packet forward path,reduce the resource consumption compared with existing tracing scheme.Data tracing audit method has fine-grained detection and feasible performance.
基金supported by the Fundamental Research Funds under Grant 2021JBZD204ZTE industry-university research cooperation fund project “Research on network identity trusted communication technology architecture”State Key Laboratory of Mobile Network and Mobile Multimedia Technology
文摘Link flooding attack(LFA)is a fresh distributed denial of service attack(DDoS).Attackers can cut off the critical links,making the services in the target area unavailable.LFA manipulates legal lowspeed flow to flood critical links,so traditional technologies are difficult to resist such attack.Meanwhile,LFA is also one of the most important threats to Internet of things(IoT)devices.The introduction of software defined network(SDN)effectively solves the security problem of the IoT.Aiming at the LFA in the software defined Internet of things(SDN-IoT),this paper proposes a new LFA mitigation scheme ReLFA.Renyi entropy is to locate the congested link in the data plane in our scheme,and determines the target links according to the alarm threshold.When LFA is detected on the target links,the control plane uses the method based on deep reinforcement learning(DRL)to carry out traffic engineering.Simulation results show that ReLFA can effectively alleviate the impact of LFA in SDN IoT.In addition,the rerouting time of ReLFA is superior to other latest schemes.
基金Supported by Applied Technology Research and Development Fund Plan Item in Inner Mongolia(20140114)
文摘Against the demand of intelligent greenhouse construction of facility agriculture,greenhouse environment monitoring system is developed.The system contains three-layer architecture: sensor network layer at the bottom,data transmission convergence layer in the middle and monitoring application layer on the top,which is different from design idea of the existing system architecture.The bottom layer uses ZigBee wireless communication technology to construct wireless sensor network,and node type contains coordinator,router and acquisition terminal.Acquisition terminal is distributed in each greenhouse to collect data and play the role of wireless transmission,and router plays the function of data forwarding as the bridge of acquisition terminal and coordinator.Middle layer is composed of monitoring software developed by Lab VIEW software of NI Company and coordinator,which is used to gather data from the bottom layer.The top layer is comprehensive monitoring platform developed by Java language,which is used to gather greenhouse data of all plantation bases in one region,thereby providing comprehensive information service for government,enterprise and farmer.Greenhouse environment monitoring system realizes data collection and sharing of greenhouse environment information(air temperature,air humidity,light intensity and carbon dioxide concentration).Via test verification,the system's operation is stable,with certain application value.
基金Hongtao Bian acknowledges the support from the National Natural Science Foundation of China(No.22173054)Hongtao Bian also thanks the financial support from Fundamental Research Funds for the Central Universities(GK202001009)+2 种基金Natural Science Fundamental Research Plan of Shaanxi Province(No.2024JC-JCQN-15)111 Project(B14041)Program for Changjiang Scholars and the Innovative Research Team in University(IRT-14R33).