Intent-Based Mediation in SDN Networks: A Study Applied to Autonomous Security in IoT Environments

• Grant number: 25/16191-7
• Support Opportunities: Scholarships in Brazil - Master
• Start date: October 01, 2025
• End date: July 31, 2027
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Principal Investigator: Luiz Fernando Bittencourt
• Grantee: Derick Gustavo Andrighetti
• Host Institution: Instituto de Computação (IC). Universidade Estadual de Campinas (UNICAMP). Campinas , SP, Brazil
• Company: Universidade Estadual de Campinas (UNICAMP). Faculdade de Engenharia Elétrica e de Computação (FEEC)
• Associated research grant: 21/00199-8 - SMART NEtworks and ServiceS for 2030 (SMARTNESS), AP.PCPE

Abstract

The increasing sophistication of cyberattacks, particularly Distributed Denial-of-Service (DDoS) attacks, poses a significant challenge to the security of applications handling large volumes of data. Dynamic DDoS attacks, which can adapt to the target's defenses, highlight the need for more flexible and autonomous protection mechanisms. This challenge is especially critical in Internet of Things (IoT) environments, where the diversity and distribution of devices complicate threat detection and mitigation.Software-Defined Networks (SDN) provide flexibility and centralized control but still rely largely on manual configurations and static mechanisms. Intent Driven Networks (IDN) aim to abstract network management in a declarative manner, reducing human intervention, yet face limitations in the interpretation and fulfillment of intents. Integrating IDN and SDN emerges as a promising approach to enable self-adaptive IoT networks capable of real-time behavioral adjustments based on context and detected threats, while maintaining performance and system integrity.This work proposes the development and analysis of a functional prototype for intent-oriented mediation in the ONOS SDN controller, enabling autonomous IoT network adaptation against attacks. The mediator will operate between the application layer and the infrastructure, translating high-level intents into mitigation actions focused on detecting and isolating malicious nodes. The approach is expected to reduce the impact of attacks without compromising network performance, minimizing the need for manual intervention.The work plan includes: (i) literature review on SDN, IDN, and self-adaptive security; (ii) analysis of intent-based security solutions; (iii) definition of tools and development environment; (iv) initial mediator implementation and preliminary testing; (v) model refinement and performance evaluation in security scenarios; (vi) comparative analysis and scientific article preparation; and (vii) dissertation writing and defense.The project is part of the SMARTNESS Engineering Research Center (CPE), specifically under the DEMIST Research Strand (Distributed Edge Computing Swarm Intelligence), contributing to scientific and technological advancements in Customized Edge Computing. Expected results include new mechanisms to prevent and mitigate attacks on networking devices across the computing continuum, covering both edge equipment and telecommunications systems.