DVF-fog: distributed virtual firewall in fog computing based on risk analysis

摘要

To eliminate network saturation during data exchanges, fog computing is deployed as the technology that benefits from both cloud computing and internet of things (IoT) paradigms. Therefore, we focus on network access control issues that are considered as grave challenges in a distributed environment such as fog/cloud computing. Therefore, we present an architecture for distributed fog with a divided topology into zones and implement distributed firewall/controller. This way, we can combine user-based access control and distributed network-based access control based on risk analysis and estimation. The simulation results show that our proposed technique improves the network performance in terms of throughput and blocking rate and it is able to prevent DDoS. Furthermore, the comparison with existing approaches based on the openstack framework illustrates that the fog-based distributed virtual firewall (DVF) approach decreases significantly the false positive rate (FPR) to be 0.0942% and increases the true positive rate (TPR) to be 99.9%.