The incoming smart Industry 4.0 envisions fully interconnected scenarios to boost the efficiency, quality and performance of industrial processes. In this context, communication technologies play a pivotal role as the key tool that enables the interconnection among a priori isolated business processes, making the most of them and resulting in more powerful business-level applications and decision-making. In this paper, we present the application of two cutting-edge telecommunication technologies, namely, network function virtualization (NFV) and software-defined networking (SDN), to the manufacturing industry, showing how these technologies can help improve manufacturing processes. We introduce the SN4I (Smart Networks for Industry) experimental facility, which is an NFV- and SDN-aware communication network that connects the University of the Basque Country with the Aeronautics Advanced Manufacturing Centre. In this regard, NFV provides a flexible way to deploy virtual services, while SDN allows the programming of network elements to interconnect these virtual services by means of virtual links or virtual networks. Both technologies guarantee full data and performance level isolation, ensuring that virtual services running over the same physical hardware or virtual links deployed over the same physical network will never interfere with one another. With the integration of NFV and SDN in manufacturing networks, the design, evaluation and deployment time of services that include computational, storage and networking resources is drastically decreased, facilitating innovation and optimizing network and hardware resource utilization.

Railway systems have evolved considerably in the last years with the adoption of new communication technologies. Aiming to achieve a single European railway network, the European Rail Traffic Management System (ERTMS) emerged in Europe to substitute multiple and noninteroperable national railway communication systems. This system and its security strategies were designed in late 1990s. Recent works have identified vulnerabilities related to integrity, authenticity, availability, and confidentiality. In the context of defining effective countermeasures to mitigate potential vulnerabilities, these vulnerabilities have to be analysed. In this article we introduce a framework that attempts to challenge ERTMS security by evaluating the exploitability of these vulnerabilities.

Upcoming smart scenarios enabled by the Internet of Things (IoT) envision smart objects that provide services that can adapt to user behavior or be managed to achieve greater productivity. In such environments, smart things are inexpensive and, therefore, constrained devices. However, they are also critical components because of the importance of the information that they provide. Given this, strong security is a requirement, but not all security mechanisms in general and access control models in particular are feasible. In this paper, we present the feasibility assessment of an access control model that utilizes a hybrid architecture and a policy language that provides dynamic fine-grained policy enforcement in the sensors, which requires an efficient message exchange protocol called Hidra. This experimental performance assessment includes a prototype implementation, a performance evaluation model, the measurements and related discussions, which demonstrate the feasibility and adequacy of the analyzed access control model.

Cyber-Physical Systems (CPSs) rely on networks that interconnect sensors and actuators to perform measurement, supervision and protection functions in different domains, such as transportation and industrial automation control systems. These networks must be able to support mobile wireless CPSs that are demanding new requirements related to flexibility and heterogeneity without compromising the Quality of Service (QoS). However, it is hard to determine, for example, the optimal resource allocation or the most reliable paths without global network information. In this way, the Software-Defined Networking paradigm is being considered as key to overcome such emerging needs. In particular, an SDN controller is able to establish paths between sensors and actuators according to bandwidth, latency, redundancy, and safety considerations. Thus, the goal of this paper is to review the state of the art of SDN approaches applied to mission-critical applications by identifying trends, challenges and opportunities for the potential development of software-defined cyber-physical networks.

Since the appearance of OpenFlow back in 2008, software-defined networking (SDN) has gained momentum. Although there are some discrepancies between the standards developing organizations working with SDN about what SDN is and how it is defined, they all outline traffic engineering (TE) as a key application. One of the most common objectives of TE is the congestion minimization, where techniques such as traffic splitting among multiple paths or advanced reservation systems are used. In such a scenario, this manuscript surveys the role of a comprehensive list of SDN protocols in TE solutions, in order to assess how these protocols can benefit TE. The SDN protocols have been categorized using the SDN architecture proposed by the open networking foundation, which differentiates among data-controller plane interfaces, application-controller plane interfaces, and management interfaces, in order to state how the interface type in which they operate influences TE. In addition, the impact of the SDN protocols on TE has been evaluated by comparing them with the path computation element (PCE)-based architecture. The PCE-based architecture has been selected to measure the impact of SDN on TE because it is the most novel TE architecture until the date, and because it already defines a set of metrics to measure the performance of TE solutions. We conclude that using the three types of interfaces simultaneously will result in more powerful and enhanced TE solutions, since they benefit TE in complementary ways.