Intent-Based In-flight Service Encryption in Multi-Layer Transport Networks

Chamania, Mohit; Szyrkowiec, Thomas; Santuari, Michele; Siracusa, Domenico; Autenrieth, Achim; López, Vı́ctor; Skoldstrom, Pontus; Junique, Stéphane

doi:10.1364/ofc.2017.tu3l.10

Cited by 5 publications

(2 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [15] we provided a proof of concept (PoC) based on ONOS (http://onosproject.org/) for an automatic secure service instantiation at the IP and optical layer and evaluated the overhead introduced by the processing in the controller. We extended this PoC by including MAC layer encryption and using a high-level intent interface developed in ACINO (http://www.acino.eu/) [16]. The work at hand demonstrates how ONOS' existing intent interface with minimally invasive extensions can be used to select the proper layer for encryption.…”

Section: Secure Servicesmentioning

confidence: 99%

See 1 more Smart Citation

Automatic Intent-Based Secure Service Creation Through a Multilayer SDN Network Orchestration

Szyrkowiec¹,

Santuari²,

Chamania³

et al. 2018

J. Opt. Commun. Netw.

Self Cite

View full text Add to dashboard Cite

Growing traffic demands and increasing security awareness is driving the need for secure services. Current solutions require manual configuration and deployment based on the customer's requirements. In this work, we present an architecture for an automatic intent-based provisioning of a secure service in a multilayer -IP, Ethernet and optical -network while choosing the appropriate encryption layer using an open-source SDN orchestrator. The approach is experimentally evaluated in a testbed with commercial equipment. Results indicate that the processing impact of secure channel creation on a controller is negligible. As the time for setting up services over WDM is varying between technologies, it needs to be taken into account in the decision process.

show abstract

Section: Secure Servicesmentioning

confidence: 99%

“…The enhancements of the existing ACINO orchestrator implementation [21] affected in particular the northbound interface, the intent processing and the southbound interface (SBI). Like listed before, some of them have been already presented in [15], [16]. Here, they will be explained in more detail.…”

Section: Extensions For Encryptionmentioning

confidence: 99%