Leveraging SDN To Improve Security in Industrial Networks

In recent years, several important initiatives have appeared worldwide, aimed at bringing significant innovation in next generations of industrial networked systems (INSs). For example, the Industry 4.0 and Factory of the Future frameworks are paving the way to modern intelligent factories, where issues such as the communication complexity between smart devices or the system on-the-fly reconfiguration are dealt with in efficient and cost-effective ways. However, global connectivity also implies constant increase of cyber menaces targeting industrial systems, so that security must be considered since the very beginning when new appealing solutions are conceived. In this paper, we exploit the innovative Software Defined Networking (SDN) paradigm to introduce improvements in managing the network infrastructure of INSs, as this can help in reducing the management costs and complexity. In particular, enhanced SDN functionalities are adopted, which are able to provide security support in additions to their native switching/routing functionalities. The paper also shows how this approach can overcome some limitations of many current INS security architectures. The feasibility of the proposed solution is confirmed by the development of a simple laboratory prototype based on commodity hardware, and used to obtain some preliminary evaluation of the achievable functionality and performance benefits.