The rapid development of the Internet of Things (IoT) has made impressive achievements, raising a heated discussion about IoT big data, in which data security and privacy issues are key concerns. Due to the ubiquity of IoT, IoT big data has not only brought convenience to people's daily lives, but also increased the potential attack surfaces for cybercriminals. At the same time, considering the characteristics of resource constraints and heterogeneity, with traditional network security solutions it can be difficult to achieve ideal results in the IoT environment, which further exacerbates the challenges faced by IoT big data security. In this case, the advantages introduced by software defined networking (SDN) have the potential to meet the challenges of IoT security risks. To this aim, we propose an ID-based SDN secure network architecture called IBSDN. Different from the traditional SDN solution, IBSDN is committed to providing IoT with endogenous trusted services on the network side by embedding unforgeable terminal identities in the data stream. This network-level trusted service can prevent IoT terminals from consuming restricted resources for the sake of security, providing greater scalability and manageability for network security monitoring.

中文翻译：

---

基于 ID 的物联网 SDN


物联网的快速发展取得了令人瞩目的成就，引发了人们对物联网大数据的热烈讨论，其中数据安全和隐私问题成为人们关注的焦点。由于物联网的无处不在，物联网大数据不仅给人们的日常生活带来了便利，也增加了网络犯罪分子的潜在攻击面。同时，考虑到资源约束和异构性的特点，传统的网络安全解决方案在物联网环境下很难达到理想的效果，这进一步加剧了物联网大数据安全面临的挑战。在这种情况下，软件定义网络（SDN）带来的优势有可能应对物联网安全风险的挑战。为此，我们提出了一种基于ID的SDN安全网络架构，称为IBSDN。与传统SDN解决方案不同，IBSDN致力于通过在数据流中嵌入不可伪造的终端身份，为物联网提供网络侧内生的可信服务。这种网络级的可信服务可以防止物联网终端为了安全而消耗有限的资源，为网络安全监控提​​供更大的可扩展性和可管理性。