Internet of Things virtual security device based on MiddleBox

Abstract

The invention provides an Internet of Things virtual security device based on MiddleBox, which can realize security management and automatic security defense of Internet of Things equipment. The system includes: a processor; the system comprises a physical device layer, an Internet of Things device layer, an Internet of Things control layer and a virtual MiddleBox layer arranged between the physical device layer and the Internet of Things control layer. Wherein the physical device layer is in communication connection with at least one physical device, the Internet of Things control layer is provided with an Internet of Things controller used for controlling the physical device, the virtual MiddleBox layer constructs at least one virtual security device, and the virtual security devices arein communication connection with the physical devices in a one-to-one correspondence mode; the access flow and access of all entity devices of the physical device layer are forwarded to the virtual security device, and if the virtual security device detects a security threat, the virtual security device can perform automatic processing according to a preset security policy to block malicious access in real time. The access data is forwarded to the physical device only when the virtual security device detects that the virtual security device is secure.

Description

technical field [0001] The invention belongs to the technical field of the Internet of Things, and in particular relates to a MiddleBox-based virtual security device for the Internet of Things that can realize security management and automatic security defense of the Internet of Things device. Background technique [0002] Since IoT devices are usually low-power devices with limited resources, traditional defense methods such as anti-virus software and firewalls are difficult to be directly installed on the device system to resist security threats, making IoT devices easy to be attacked and exploited. . In addition, a large number of legacy IoT devices currently have weak passwords, hard-coded and non-updatable firmware issues, making the security management of IoT devices an urgent problem to be solved. [0003] Tianlong Yu et al. pointed out that traditional security defense methods cannot capture the dynamic environment of the IoT system and cross-device interaction info...

AI Technical Summary

Problems solved by technology

However, detecting network traffic, ports, etc. only by capturing data packets on the virtual security function instance can only detect and defend at the network layer, and cannot obtain the operating data and security status of the internal system layer of the device, thus making it impossible to conduct system-wide monitoring. Security Monitoring

Images