2019 journal article

Resilience of IoT Systems Against Edge-Induced Cascade-of-Failures: A Networking Perspective

IEEE INTERNET OF THINGS JOURNAL, 6(4), 6952–6963.

By: J. Wang n , S. Pambudi n, W. Wang n  & M. Song *

co-author countries: United States of America πŸ‡ΊπŸ‡Έ
author keywords: Interdependent networks; Internet of Things (IoT) architecture; network resilience
Source: Web Of Science
Added: August 26, 2019

Internet of Things (IoT) is a networking paradigm that interconnects physical systems to the cyber world, to provide automation and intelligence via interdependent links between the two domains. Such interdependence renders IoT systems vulnerable to random failures, e.g., broken communication links or crashed cyber instances, because a single incident in one domain can develop into a cascade-of-failures across domains, which dissolves the network structure, and has devastating consequences. To answer how robust an IoT system is, this paper studies its resilience by examining the impact of edge- and jointly-induced cascades, that is, a sequence of failures caused by randomly broken physical links (and simultaneous failing cyber nodes). Resilience of an IoT system is quantified by two new metrics, the critical edge disconnecting probability Ο† <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cr</sub> , i.e., the maximum intensity of random failures the system can withstand, and the cascade length Ο„ <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cf</sub> , i.e., the lifetime of a cascade. For IoT systems with Poisson degree distributions, we derive exact solutions for the critical disconnecting probability Ο† <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cr</sub> , above which an edge-induced cascade will completely fragment the network. We also find that the critical condition Ο† <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cr</sub> marks a dichotomy of the expected cascade length E(Ο„ <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cf</sub> ): for the super-critical (Ο† > Ο† <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cr</sub> ) scenario, we obtain E(Ο„ <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cf</sub> ) ~ exp(1 - Ο†) through analysis, while for the subcritical scenario, we observe E(Ο„ <sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">cf</sub> ) ~ exp(1/1 - Ο†) through simulations. With these results, the final outcome of a cascade can be anticipated upon the initial failures, while the reaction window of time-sensitive countermeasures can be obtained before a cascade fully unfolds.