Distributed Filtering in Industrial Networks

The security of large interconnected systems is a major concern and a priority to address. This concern is especially pronounced for industrial systems and critical infrastructures, where the cyber aspects are closely interwoven with the physical reality. Although the architectural and technological advancements in such systems have provided greater flexibility and more efficient management, they have also increased the attack surface. One key aspect to consider is the security of the communication network, which can be vulnerable to attacks involving anomalous spikes of traffic that can lead to a denial-of-service on the network itself. In this paper, we focus on recent techniques that take advantage of multiple firewalls in the system to distribute the allocated filtering rules, thus reducing the overall device load.