An Efficient SDN Architecture for Smart Home Security Accelerated by FPGA

With the rise of Internet of Things (IoT) devices, home network management and security are becoming complex. There is an urgent requirement to make smart home network management more efficient. This work proposes an SDN-based architecture to secure smart home networks through K-Nearest Neighbor (KNN) based device classifications and malicious traffic detection. The efficiency is enhanced by offloading the computation-intensive KNN model to a Field Programmable Gate Arrays (FPGA). Furthermore, we propose a custom KNN solution that exhibits the best performance on an FPGA compared with four alternative KNN instances (i.e., 78% faster than a parallel Bubble Sort-based implementation and 99% faster than three other sorting algorithms). Moreover, with 36,225 training samples, the proposed KNN solution classifies a test query with 95% accuracy in approximately 4 ms on an FPGA compared to 57 seconds on a CPU platform. This highlights the promise of FPGA-based platforms for edge computing applications in the smart home.

[1]  Liyuan Liu,et al.  Acceleration of k-Nearest Neighbor Algorithm on FPGA using Intel SDK for OpenCL , 2018, 2018 IEEE 61st International Midwest Symposium on Circuits and Systems (MWSCAS).

[2]  Marco Furini,et al.  Standards, Security and Business Models: Key Challenges for the IoT Scenario , 2017, Mobile Networks and Applications.

[3]  Jorge Cabral,et al.  Towards an FPGA-based edge device for the Internet of Things , 2015, 2015 IEEE 20th Conference on Emerging Technologies & Factory Automation (ETFA).

[4]  Gaël Varoquaux,et al.  Scikit-learn: Machine Learning in Python , 2011, J. Mach. Learn. Res..

[5]  Safraz Rampersaud,et al.  Computing Nash Equilibria in Bimatrix Games: GPU-Based Parallel Support Enumeration , 2012, IEEE Transactions on Parallel and Distributed Systems.

[6]  Suriayati Chuprat,et al.  Zero-delay FPGA-based odd-even sorting network , 2013, 2013 IEEE Symposium on Computers & Informatics (ISCI).

[7]  Tom Feist,et al.  Vivado Design Suite , 2012 .

[8]  Jun Peng,et al.  An Efficient KNN Algorithm Implemented on FPGA Based Heterogeneous Computing System Using OpenCL , 2015, 2015 IEEE 23rd Annual International Symposium on Field-Programmable Custom Computing Machines.

[9]  Zhigang Lu,et al.  FEW-NNN: A fuzzy entropy weighted natural nearest neighbor method for flow-based network traffic attack detection , 2020, China Communications.

[10]  C. Purdy,et al.  Reducing calculation requirements in FPGA implementation of deep learning algorithms for online anomaly intrusion detection , 2017, 2017 IEEE National Aerospace and Electronics Conference (NAECON).

[11]  Sonia Kuwelkar,et al.  Performance Analysis of Merge Sort Algorithms , 2020, 2020 International Conference on Electronics and Sustainable Communication Systems (ICESC).

[12]  Hiroki Matsutani,et al.  An FPGA-based In-NIC Cache Approach for Lazy Learning Outlier Filtering , 2017, 2017 25th Euromicro International Conference on Parallel, Distributed and Network-based Processing (PDP).

[13]  Tao Xie,et al.  A Memory-Access-Efficient Adaptive Implementation of kNN on FPGA through HLS , 2019, 2019 IEEE 37th International Conference on Computer Design (ICCD).

[14]  Henrique C. Freitas,et al.  Reconfigurable FPGA-Based K-Means/K-Modes Architecture for Network Intrusion Detection , 2020, IEEE Trans. Circuits Syst. II Express Briefs.

[15]  Hiroto Yasuura,et al.  The Parallel Enumeration Sorting Scheme for VLSI , 1982, IEEE Transactions on Computers.

[16]  Behnam Dezfouli,et al.  Securing Smart Homes via Software-Defined Networking and Low-Cost Traffic Classification , 2021, 2021 IEEE 45th Annual Computers, Software, and Applications Conference (COMPSAC).

[17]  Jiwoong Kang,et al.  FPGA-based Real-time Abnormal Packet Detector for Critical Industrial Network , 2019, 2019 IEEE Symposium on Computers and Communications (ISCC).

[18]  Nour Moustafa,et al.  UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set) , 2015, 2015 Military Communications and Information Systems Conference (MilCIS).

[19]  Fengbo Ren,et al.  Are FPGAs Suitable for Edge Computing? , 2018, HotEdge.

[20]  Suhaib A. Fahmy,et al.  Network Intrusion Detection Using Neural Networks on FPGA SoCs , 2019, 2019 29th International Conference on Field Programmable Logic and Applications (FPL).

[21]  Dimitrios Soudris,et al.  FPGA Acceleration of Approximate KNN Indexing on High- Dimensional Vectors , 2019, 2019 14th International Symposium on Reconfigurable Communication-centric Systems-on-Chip (ReCoSoC).

[22]  R. Rashmi,et al.  IDS Based Network Security Architecture with TCP/IP Parameters using Machine Learning , 2018, 2018 International Conference on Computing, Power and Communication Technologies (GUCON).