Network Security Approach based on Traffic Engineering Fast ReRoute with support of Traffic Policing

Lemeshko, O.; Yeremenko, O.; Yevdokymenko, M.; Shapovalova, A.; Lemeshko, V.

Публікація:
Network Security Approach based on Traffic Engineering Fast ReRoute with support of Traffic Policing

dc.contributor.author	Lemeshko, O.
dc.contributor.author	Yeremenko, O.
dc.contributor.author	Yevdokymenko, M.
dc.contributor.author	Shapovalova, A.
dc.contributor.author	Lemeshko, V.
dc.date.accessioned	2021-08-31T09:22:00Z
dc.date.available	2021-08-31T09:22:00Z
dc.date.issued	2021
dc.description.abstract	The work is devoted to the approach development and investigation of the network security providing based on Traffic Engineering Fast ReRoute with support of Traffic Policing. The corresponding flow-based mathematical model has been developed where the technological task of secure fast rerouting was presented in the form of a linear programming problem. The novelty of the proposed model is the modification of load balancing conditions and bandwidth protection during fast rerouting, which in addition to the Quality of Service, also considers the probability of compromising the link as an indicator of network security. The routing solutions obtained within the proposed model are aimed at reducing the overload of communication links with a high probability of compromising by redistributing traffic for transmission through more secure network links. The advantage of the proposed solution is that in the conditions of congestion the load balancing is realized on the principles of Traffic Engineering and, if necessary, differentiated limitation of the load entering the network. An additional advantage of the proposed optimization model is its linearity, which focuses on the low computational complexity of the corresponding protocol implementation in practice. Numerical research of the Secure TE-FRR-TP model has confirmed the adequacy and efficiency of routing solutions made on its basis, both in terms of ensuring network security, resilience, and load balancing with traffic policing based on priorities.	uk_UA
dc.identifier.citation	Lemeshko O., Yeremenko O., Yevdokymenko M., Shapovalova A., Lemeshko V. Network Security Approach Based on Traffic Engineering Fast ReRoute with support of Traffic Policing. Proceedings of the Selected Papers on Cybersecurity Providing in Information and Telecommunication Systems (CPITS 2021). Kyiv, Ukraine. CEUR, 2021. Vol. 2923. P. 81-90.	uk_UA
dc.identifier.issn	1613-0073
dc.identifier.uri	https://openarchive.nure.ua/handle/document/17395
dc.language.iso	en	uk_UA
dc.publisher	CEUR-WS	uk_UA
dc.subject	Cyber resilience	uk_UA
dc.subject	FRR	uk_UA
dc.subject	redundancy	uk_UA
dc.subject	TP	uk_UA
dc.subject	TE	uk_UA
dc.subject	Fast ReRoute	uk_UA
dc.subject	Traffic Engineering	uk_UA
dc.subject	Traffic Policing	uk_UA
dc.subject	security metric	uk_UA
dc.subject	probability of compromise	uk_UA
dc.title	Network Security Approach based on Traffic Engineering Fast ReRoute with support of Traffic Policing	uk_UA
dc.type	Article	uk_UA
dspace.entity.type	Publication