A Comparative Study on Virtual Private Networks for Future Industrial Communication Systems

Lackorzynski, Tim; Köpsell, Stefan; Strufe, Thorsten

doi:10.1109/wfcs.2019.8758010

Cited by 14 publications

(10 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The use of WireGuard as a VPN for future industrial systems has been investigated in [14]. The reported results confirm that WireGuard outperforms IPsec in terms of throughput and latency on different hardware platforms.…”

Section: B Related Workmentioning

confidence: 60%

5G Network Slice Isolation with WireGuard and Open Source MANO: A VPNaaS Proof-of-Concept

Haga

Esmaeily

Kralevska

et al. 2020

Preprint

View full text Add to dashboard Cite

The fifth-generation (5G) mobile networks aim to host different types of services on the same physical infrastructure. Network slicing is considered as the key enabler for achieving this goal. Although there is some progress in applying and implementing network slicing in the context of 5G, the security and performance of network slicing still have many open research questions. In this paper, we propose the first OSM-WireGuard framework and its lifecycle. We implement the WireGuard secure network tunneling protocol in a 5G network to provide a VPN-as-a-Service (VPNaaS) functionality for virtualized network functions. We demonstrate that OSM instantiates WireGuard-enabled services up and running in 4 min 26 sec, with potential the initialization time to go down to 2 min 44 sec if the operator prepares images with a pre-installed and up-to-date version of WireGuard before the on-boarding process. We also show that the OSM-WireGuard framework provides considerable enhancement of up to 5.3 times higher network throughput and up to 41% lower latency compared to OpenVPN. The reported results show that the proposed framework is a promising solution for providing traffic isolation with strict latency and throughput requirements.

show abstract

Section: B Related Workmentioning

confidence: 60%

5G Network Slice Isolation with WireGuard and Open Source MANO: A VPNaaS Proof-of-Concept

Haga

Esmaeily

Kralevska

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

“…These legacy devices must thus be isolated from the Internet, but care must be taken in the isolation technologies, as to not provide too much overhead in time-critical processes. To that end, Lackorzynski et al [220] compare multiple readily available VPN solutions on metrics important to industrial appliances.…”

Section: H Network Securitymentioning

confidence: 99%

A Systematic Survey of Industrial Internet of Things Security: Requirements and Fog Computing Opportunities

Tange

Donno

Fafoutis

et al. 2020

IEEE Commun. Surv. Tutorials

297

112

View full text Add to dashboard Cite

A key application of the Internet of Things (IoT) paradigm lies within industrial contexts. Indeed, the emerging Industrial Internet of Things (IIoT), commonly referred to as Industry 4.0, promises to revolutionize production and manufacturing through the use of large numbers of networked embedded sensing devices, and the combination of emerging computing technologies, such as Fog/Cloud Computing and Artificial Intelligence. The IIoT is characterized by an increased degree of inter-connectivity, which not only creates opportunities for the industries that adopt it, but also for cyber-criminals. Indeed, IoT security currently represents one of the major obstacles that prevent the widespread adoption of IIoT technology. Unsurprisingly, such concerns led to an exponential growth of published research over the last few years. To get an overview of the field, we deem it important to systematically survey the academic literature so far, and distill from it various security requirements as well as their popularity. This paper consists of two contributions: our primary contribution is a systematic review of the literature over the period 2011-2019 on IIoT Security, focusing in particular on the security requirements of the IIoT. Our secondary contribution is a reflection on how the relatively new paradigm of Fog computing can be leveraged to address these requirements, and thus improve the security of the IIoT.

show abstract

“…The proposed solution combines network slicing, SDN and legacy VPN protocols to enable a gradual deployment over an ISP network. Many tunneling technologies are available to encapsulate VPN packets over the backbone network for establishing and maintaining a logical network connection [2]. This work focuses on two Layer-3 VPN types: BGP/MPLS and IPsec over GRE.…”

Section: Dynamic Network Slicingmentioning

confidence: 99%

“…1 exemplifies VPNs connecting the headquarters to users, partners and branch offices. In designing a VPN, many tunneling technologies can encapsulate packets over the backbone network [2]. This paper focuses on Layer 3 VPNs, which establish logical connections over IP networks.…”

Section: Introductionmentioning

confidence: 99%

On the Network Slicing for Enterprise Services with Hybrid SDN

Zorello

Troia²,

Giannotti

et al. 2020

2020 IEEE Latin-American Conference on Communications (LATINCOM)

View full text Add to dashboard Cite

Nowadays, companies strongly rely on Virtual Private Networks (VPNs) to deliver services between geographically distributed branch offices. Internet Service Providers (ISPs) must therefore offer a reliable and cost-effective connectivity solution. VPNs are commonly based on static bandwidth allocation over MPLS tunnels, which cause over-provisioning and underutilization of network resources. Software Defined Networking (SDN) appears as a solution to provide agile enterprise networking while reducing operators cost. This paper presents the design and implementation of a Hybrid SDN-based network application to provide dynamic services. Such an architecture enables combining centralized and distributed control with traditional VPN protocols to provision services through network slices. The application performs a flexible policy-based routing, selecting the access technology according to the Quality of Service (QoS) requirements and the network conditions. The simulations executed over an VIRL emulated environment by Cisco show that the proposed network control enables the services to be efficiently provisioned without the need of over-provisioning the resources. Furthermore, a customized network slicing over legacy equipment guarantees the service requirements.

show abstract

A Comparative Study on Virtual Private Networks for Future Industrial Communication Systems

Cited by 14 publications

References 12 publications

5G Network Slice Isolation with WireGuard and Open Source MANO: A VPNaaS Proof-of-Concept

5G Network Slice Isolation with WireGuard and Open Source MANO: A VPNaaS Proof-of-Concept

A Systematic Survey of Industrial Internet of Things Security: Requirements and Fog Computing Opportunities

On the Network Slicing for Enterprise Services with Hybrid SDN

Contact Info

Product

Resources

About