Architecture of homeostatic security control for digital manufacture systems based on software-defined networks

Evgeny Pavlenko, Dmitry Zegzhda, A. Sarygulov, V. Sergeev, L. Ungvári, W. Semmler
2018 SHS Web of Conferences  
The authors have offered the homeostatic control system architecture for digital manufacture security based on the software-defined network technology.We have highlighted the development features of digital manufacture systems and defined the technology advantages of software-defined networks, which allow these networks to be successfully applied with flexible and adaptive topology for a highly efficient new generation of cyber-physical systems. We have also described the main operating
more » ... es of software-defined networks in digital manufacture systems. A description of homeostatic security control technology, which includes a combination of engines to provide stability of the system's internal environment and structural and functional resistance to external disturbances, is provided. We have proposed and described in detail the homeostatic security control system architecture including three generalized components: monitoring unit, decision-making unit, protection and control unit. Digital manufacture systems are based on network interfacing technologies. Classic methods and network infrastructure and data stream control technologies, which are available in the computer networks now, cannot allow network interaction to develop in distributed digital manufacture systems. The development of such distributed systems has pushed for the need for flexible, reliable, scalable, well-controlled network backbones. A network interfacing system in large-scale digital manufacture systems cannot be set up by configuring each element separately and manually. A technology is needed to be developed that will allow controlling the network infrastructure as a single system. All the requirements for network interfacing systems are met by the software-defined network technology (SDN) in which the network infrastructure control level is separated from the data transmission level by automating the control functions and by transferring them into specialized software, which runs on a standalone computer [2] . In order to implement this idea open protocol OpenFlow is developed to control network equipment that is not designed for products of certain manufacturers of multi-protocol products. By using this protocol system administrators can set and monitor: who with whom, in what conditions, with what quality can interact within the network. All the network equipment is combined under control of a SDN controller, which the network operating system is installed on: The network control system installed in OS provides the following functions: -Network control access; -Generation of data on status of network resources. -Network infrastructure monitoring. This technology makes it possible to implement strict data transmission rules within the network regardless of its topology as well as to provide intelligent response of the system to changes occurring within the network infrastructure. Close integration of cyber-physical systems with manufacturing processes related to industrial manufacture and control of a great number of complex objects has brought up the requirement to change the existing security paradigm for digital manufacture. It is associated with the fact that direct transition of information security features such confidentiality, accessibility, integrity is impossible in digital manufacture because unlike information processes, physical processes are irreversible and it is impossible to implement the same monitoring and control level as for the information processes [3] .
doi:10.1051/shsconf/20184400067 fatcat:nz4xzu4ohnecvihfovcdhz5gsu