Automatic Intent-Based Secure Service Creation Through a Multilayer SDN Network Orchestration

被引:46
作者
Szyrkowiec, Thomas [1 ]
Santuari, Michele [2 ]
Chamania, Mohit [3 ]
Siracusa, Domenico [2 ]
Autenrieth, Achim [1 ]
Lopez, Victor [4 ]
Cho, Joo [1 ]
Kellerer, Wolfgang [5 ]
机构
[1] ADVA Opt Networking, Munich, Germany
[2] CREATE NET Res Ctr, Trento, Italy
[3] ADVA Opt Networking SE, Berlin, Germany
[4] Telefon ID, Madrid, Spain
[5] Univ Munich, Chair Commun Networks Tech, Munich, Germany
基金
欧盟地平线“2020”;
关键词
Intents; Multilayer network orchestration; Optical networks; Secure services; Software-defined networking;
D O I
10.1364/JOCN.10.000289
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Growing traffic demands and increasing security awareness are driving the need for secure services. Current solutions require manual configuration and deployment based on the customer's requirements. In this work, we present an architecture for an automatic intent-based provisioning of a secure service in a multilayer-IP, Ethernet, and optical-network while choosing the appropriate encryption layer using an open-source software-defined networking (SDN) orchestrator. The approach is experimentally evaluated in a testbed with commercial equipment. Results indicate that the processing impact of secure channel creation on a controller is negligible. As the time for setting up services over WDM varies between technologies, it needs to be taken into account in the decision-making process.
引用
收藏
页码:289 / 297
页数:9
相关论文
共 21 条
[1]  
ADVA Optical Networking, FSP 3000 OPT NETW EN
[2]  
[Anonymous], 2013, P 2 ACM SIGCOMM WORK, DOI DOI 10.1145/2491185.2491199
[3]  
[Anonymous], 2014, P 16 INT C TRANSP OP, DOI DOI 10.1109/ICTON.2014.6876451
[4]  
[Anonymous], 2006, IEEE STANDARD INFORM, DOI DOI 10.1109/IEEESTD.2006.232110
[5]  
[Anonymous], COST DAT BREACH STUD
[6]  
[Anonymous], 2014, P 3 WORKSH HOT TOP S, DOI DOI 10.1145/2620728.2620744
[7]  
[Anonymous], 2013, SSRN, DOI [DOI 10.2139/SSRN.2304426, 10.2139/ssrn.2304426]
[8]  
[Anonymous], 2010, IEEE Standard for Information TechnologyLocal and Metropolitan Area NetworksSpecific RequirementsPart 11: Wireless LAN Medium Access Control (mac) and Physical Layer (PHY) Specifications Amendment 6: Wireless access in Vehicular Environments, DOI DOI 10.1109/IEEESTD.2010.5514475
[9]  
Chamana M., 2017, 2017 19th International Conference on Intelligent System Application to Power Systems (ISAP), P1, DOI [10.1109/ISAP.2017.8071389, DOI 10.1109/ISAP.2017.8071389]
[10]  
Durner R., 2015, ACM CONEXT STUD WORK