https://link.springer.com/content/pdf/10.1057%2Fjors.1996.159.pdf

Modeling and Analysis of Stochastic Systems

Software defined networking (SDN) decouples the network control and data planes. The network intelligence and state are logically centralized and the underlying network infrastructure is abstracted from applications. SDN enhances network security by means of global visibility of the network state where a conflict can be easily resolved from the logically centralized control plane. Hence, the SDN architecture empowers networks to actively monitor traffic and diagnose threats to facilitates network forensics, security policy alteration, and security service insertion. The separation of the control and data planes, however, opens security challenges, such as man-in-the middle attacks, denial of service (DoS) attacks, and saturation attacks. In this paper, we analyze security threats to application, control, and data planes of SDN. The security platforms that secure each of the planes are described followed by various security approaches for network-wide security in SDN. SDN security is analyzed according to security dimensions of the ITU-T recommendation, as well as, by the costs of security solutions. In a nutshell, this paper highlights the present and future security challenges in SDN and future directions for secure SDN.

Security in Software Defined Networks: A Survey

Security has become the primary concern in many telecommunications industries today as risks can have high consequences. Especially, as the core and enable technologies will be associated with 5G network, the confidential information will move at all layers in future wireless systems. Several incidents revealed that the hazard encountered by an infected wireless network, not only affects the security and privacy concerns, but also impedes the complex dynamics of the communications ecosystem. Consequently, the complexity and strength of security attacks have increased in the recent past making the detection or prevention of sabotage a global challenge. From the security and privacy perspectives, this paper presents a comprehensive detail on the core and enabling technologies, which are used to build the 5G security model; network softwarization security, PHY (Physical) layer security and 5G privacy concerns, among others. Additionally, the paper includes discussion on security monitoring and management of 5G networks. This paper also evaluates the related security measures and standards of core 5G technologies by resorting to different standardization bodies and provide a brief overview of 5G standardization security forces. Furthermore, the key projects of international significance, in line with the security concerns of 5G and beyond are also presented. Finally, a future directions and open challenges section has included to encourage future research.

/pdf/a-survey-on-security-and-privacy-of-5g-technologies-1hq5wqw2pb.pdf

A Survey on Security and Privacy of 5G Technologies: Potential Solutions, Recent Advancements, and Future Directions

The development of the fifth generation (5G) wireless networks is gaining momentum to connect almost all aspects of life through the network with much higher speed, very low latency and ubiquitous connectivity. Due to its crucial role in our lives, the network must secure its users, components, and services. The security threat landscape of 5G has grown enormously due to the unprecedented increase in types of services and in the number of devices. Therefore, security solutions if not developed yet must be envisioned already to cope with diverse threats on various services, novel technologies, and increased user information accessible by the network. This paper outlines the 5G network threat landscape, the security vulnerabilities in the new technological concepts that will be adopted by 5G, and provides either solutions to those threats or future directions to cope with those security challenges. We also provide a brief outline of the post-5G cellular technologies and their security vulnerabilities which is referred to as future generations (XG) in this paper. In brief, this paper highlights the present and future security challenges in wireless networks, mainly in 5G, and future directions to secure wireless networks beyond 5G.

/pdf/security-for-5g-and-beyond-4cj06e4muu.pdf

Security for 5G and Beyond

In the centralized Wireless Sensor Network (WSN) architecture there exists a central entity, which acquires, processes and provides information from sensor nodes. Conversely, in the WSN applications in distributed Internet of Things (IoT) architecture, sensor nodes sense data, process, exchange information and perform collaboratively with other sensor nodes and endusers. In order to maintain the trustworthy connectivity and the accessibility of distributed IoT, it is important to establish secure links for end-to-end communication with proper authentication. The authors propose an implicit certificate-based authentication mechanism for WSNs in distributed IoT applications. The developed two-phase authentication protocol allows the sensor nodes and the end-users to authenticate each other and initiate secure connections. The proposed protocol supports the resource scarcity of the sensor nodes, heterogeneity and scalability of the network. The performance and security analysis justify that the proposed scheme is viable to deploy in resource constrained WSNs.

Two-phase authentication protocol for wireless sensor networks in distributed IoT applications

This paper is committed to give an overview of the Host Identity Protocol HIP, to introduce the basic ideas and the main paradigms behind it, and to make an exhaustive survey of mobility management schemes in the Host Identity Layer. The authors' goal is to show how HIP emerges from the list of potential alternatives with its wild range of possible usability, complex feature set and power to create a novel framework for future Mobile Internet architectures. In order to achieve this, the authors also perform an extensive simulation evaluation of four selected mobility solutions in the Host Identity Layer: the standard HIP mobility/multihoming RFC5206, a micromobility solution µHIP, a network mobility management scheme HIP-NEMO and a proactive, cross-layer optimized, distributed proposal designed for flat architectures UFA-HIP.

/pdf/survey-and-evaluation-of-advanced-mobility-management-59sva8y04n.pdf

Survey and Evaluation of Advanced Mobility Management Schemes in the Host Identity Layer

This chapter is committed to give a comprehensive overview of the scalability problems of mobile Internet nowadays and to show how the concept of flat and ultra flat architectures emerges due to its suitability and applicability for the future Internet. It also aims to introduce the basic ideas and the main paradigms behind the different flat networking approaches trying to cope with the continuously growing traffic demands. The discussion of the above areas will guide the readers from the basics of flat mobile Internet architectures to the paradigm's complex feature set and power creating a novel Internet architecture for future mobile communications.

/pdf/flat-architectures-towards-scalable-future-internet-mobility-15upyw6fnr.pdf

Flat architectures: towards scalable future internet mobility

The evolution of mobile telecommunication networks is accompanied by new demands for the performance, portability, elasticity, and energy efficiency of network functions. Network Function Virtualization (NFV), Software Defined Networking (SDN), and cloud service technologies are claimed to be able to provide most of the capabilities. However, great leap forward will only be achieved if resource, traffic, and mobility management methods of mobile network services can efficiently utilize these technologies. This paper conceptualizes the future requirements of mobile networks and proposes new concepts and solutions in the form of Software-Defined Mobile Networks (SDMN) leveraging SDN, NFV and cloud technologies. We evaluate the proposed solutions through testbed implementations and simulations. The results reveal that our proposed SDMN enhancements supports heterogeneity in wireless networks with performance improvements through programmable interfaces and centralized control.

/pdf/new-concepts-for-traffic-resource-and-mobility-management-in-1le1o5kzf8.pdf

New concepts for traffic, resource and mobility management in software-defined mobile networks

The Ultra Flat Architecture is a new concept of fixed-mobile convergent networks that aims to scale well with the mobile Internet traffic explosion prognosticated for the next 5–10 years. This paper presents a new delegation-based UFA signaling framework using HIP, IEEE 802.21 and the context transfer protocol. The main procedures contributed by this signaling framework are terminal attachment, session establishment, proactive handover preparation and handover execution services. The paper introduces several novel Host Identity Protocol extensions, i.e., two different HIP delegation service types for optimized message exchange in HIP-based UFA mobility and multihoming operations, a context transfer scheme for HIP and IPsec associations supporting and extending the mechanisms of the delegation-based UFA functions, and a fast operator-centric method for HIP-level access authorization. The proposed UFA signaling framework is compared with the existing SIP-based UFA signaling solution. The comparison shows that our scheme is able to support legacy Internet applications in an operator based environment, it is stronger in security, but its deployment requires more additional modules in the architecture. For IMS applications, the SIP-based alternative is a better choice.

/pdf/a-delegation-based-hip-signaling-scheme-for-the-ultra-flat-3je78o0jjo.pdf

A delegation-based HIP signaling scheme for the Ultra Flat Architecture

The Ultra Flat Architecture is a new concept of fixed mobile convergent networks that aims to scale well with the mobile internet traffic explosion prognosticated for the next 5–10 years. This paper investigates the adequacy of three different signaling protocol alternatives for the Ultra Flat Architecture based on operator requirements. The applied evaluation method is the Multiplicative Analytic Hierarchy Process. After the presentation of the evaluation process, we define our evaluation criteria. It is followed by the presentation of the main features of three UFA signaling protocol alternatives. Finally, the terminal scores of the alternatives are analyzed under different circumstances. The SIP-based alternative shows high performance, and low deployment cost. It is adequate for IMS applications. However by the increase of the demand to support the mobility of legacy internet applications, HIP or MIP-based signaling schemes are more suitable to our criteria. The evaluation shows the effect of the criteria weights and the network scenario on the suitability of the alternatives.

/pdf/evaluation-and-comparison-of-signaling-protocol-alternatives-290qd0xl2i.pdf

Zoltán Faigl

Papers

Survey and Evaluation of Advanced Mobility Management Schemes in the Host Identity Layer

Flat architectures: towards scalable future internet mobility

New concepts for traffic, resource and mobility management in software-defined mobile networks

A delegation-based HIP signaling scheme for the Ultra Flat Architecture

Evaluation and Comparison of Signaling Protocol Alternatives for the Ultra Flat Architecture