Публікація: Network Security Approach based on Traffic Engineering Fast ReRoute with support of Traffic Policing
Завантаження...
Файли
Дата
2021
Назва журналу
ISSN журналу
Назва тома
Видавництво
CEUR-WS
Анотація
The work is devoted to the approach development and investigation of the network security providing based on Traffic Engineering Fast ReRoute with support of Traffic Policing. The corresponding flow-based mathematical model has been developed where the technological task of secure fast rerouting was presented in the form of a linear programming problem. The novelty of the proposed model is the modification of load balancing conditions and bandwidth protection during fast rerouting, which in addition to the Quality of Service, also considers the probability of compromising the link as an indicator of network security. The routing solutions obtained within the proposed model are aimed at reducing the overload of communication links with a high probability of compromising by redistributing traffic for transmission through more
secure network links. The advantage of the proposed solution is that in the conditions of congestion the load balancing is realized on the principles of Traffic Engineering and, if necessary, differentiated limitation of the load entering the network. An additional advantage of the proposed optimization model is its linearity, which focuses on the low computational complexity of the corresponding protocol implementation in practice. Numerical research of the Secure TE-FRR-TP model has confirmed the adequacy and efficiency of routing solutions made on its basis, both in terms of ensuring network security, resilience, and load balancing with traffic policing based on priorities.
Опис
Ключові слова
Cyber resilience, FRR, redundancy, TP, TE, Fast ReRoute, Traffic Engineering, Traffic Policing, security metric, probability of compromise
Бібліографічний опис
Lemeshko O., Yeremenko O., Yevdokymenko M., Shapovalova A., Lemeshko V. Network Security Approach Based on Traffic Engineering Fast ReRoute with support of Traffic Policing. Proceedings of the Selected Papers on Cybersecurity Providing in Information and Telecommunication Systems (CPITS 2021). Kyiv, Ukraine. CEUR, 2021. Vol. 2923. P. 81-90.