对未来网络的全新安全展望:以盲转发为例,在保证信息安全的同时,建立智能网内服务

I. Simsek, M. Becke, Yves Igor Jerschow, E. Rathgeb
{"title":"对未来网络的全新安全展望:以盲转发为例,在保证信息安全的同时,建立智能网内服务","authors":"I. Simsek, M. Becke, Yves Igor Jerschow, E. Rathgeb","doi":"10.1109/NOF.2013.6724501","DOIUrl":null,"url":null,"abstract":"To solve many of the challenges identified in Future Network debates, there are approaches, which suggest that a network should be service-oriented, flexibly and dynamically orchestrated from atomic smart in-network services. In these approaches in-network services require access to various control data signalled in different ways to utilise the complete functionality of the orchestrated network. The diversity and amount of required control data rises progressively so that the communication endpoints have to allow more and more access to information about themselves. To ensure information confidentiality and integrity for two communicating end points, the de facto method applied so far is end-to-end encryption of information transferred between the two end points. However, in-network services have then no longer access to the encrypted control data and they cannot accomplish their tasks anymore. Thus, we can either ensure information security or establish smart in-network services. Our paper focuses on this dilemma and introduces an approach where we redesign the smart in-network services to blind but still smart ones that can still correctly process masked control data by using a new kind of cryptographic algorithms. The feasibility of our approach is demonstrated by redesigning the packet forwarding service to a blind one. Additionally, we present our prototype implementation of the blind packet forwarding and evaluate it.","PeriodicalId":143986,"journal":{"name":"2013 Fourth International Conference on the Network of the Future (NoF)","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2013-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"3","resultStr":"{\"title\":\"A clean-slate security vision for future networks: Simultaneously ensuring information security and establishing smart in-network services using the example of blind packet forwarding\",\"authors\":\"I. Simsek, M. Becke, Yves Igor Jerschow, E. Rathgeb\",\"doi\":\"10.1109/NOF.2013.6724501\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"To solve many of the challenges identified in Future Network debates, there are approaches, which suggest that a network should be service-oriented, flexibly and dynamically orchestrated from atomic smart in-network services. In these approaches in-network services require access to various control data signalled in different ways to utilise the complete functionality of the orchestrated network. The diversity and amount of required control data rises progressively so that the communication endpoints have to allow more and more access to information about themselves. To ensure information confidentiality and integrity for two communicating end points, the de facto method applied so far is end-to-end encryption of information transferred between the two end points. However, in-network services have then no longer access to the encrypted control data and they cannot accomplish their tasks anymore. Thus, we can either ensure information security or establish smart in-network services. Our paper focuses on this dilemma and introduces an approach where we redesign the smart in-network services to blind but still smart ones that can still correctly process masked control data by using a new kind of cryptographic algorithms. The feasibility of our approach is demonstrated by redesigning the packet forwarding service to a blind one. Additionally, we present our prototype implementation of the blind packet forwarding and evaluate it.\",\"PeriodicalId\":143986,\"journal\":{\"name\":\"2013 Fourth International Conference on the Network of the Future (NoF)\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2013-10-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"3\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2013 Fourth International Conference on the Network of the Future (NoF)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/NOF.2013.6724501\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 Fourth International Conference on the Network of the Future (NoF)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/NOF.2013.6724501","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 3

摘要

为了解决未来网络辩论中确定的许多挑战,有一些方法建议网络应该是面向服务的、灵活的、动态地由原子智能网络内服务编排的。在这些方法中,网络内服务需要访问以不同方式发出信号的各种控制数据,以利用编排网络的完整功能。所需控制数据的多样性和数量逐渐增加,因此通信端点必须允许越来越多地访问有关其自身的信息。为了确保两个通信端点的信息机密性和完整性,目前应用的实际方法是对两个端点之间传输的信息进行端到端加密。然而,网络内的服务就不能再访问加密的控制数据,它们就不能再完成它们的任务了。这样,既可以保证信息安全,也可以建立智能网内服务。本文着重于这一困境,并介绍了一种方法,通过使用一种新的加密算法,我们将智能网内服务重新设计为盲但仍然智能的服务,这些服务仍然可以正确处理被屏蔽的控制数据。通过将数据包转发服务重新设计为盲转发服务,验证了该方法的可行性。此外,我们还提出了盲包转发的原型实现,并对其进行了评估。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
A clean-slate security vision for future networks: Simultaneously ensuring information security and establishing smart in-network services using the example of blind packet forwarding
To solve many of the challenges identified in Future Network debates, there are approaches, which suggest that a network should be service-oriented, flexibly and dynamically orchestrated from atomic smart in-network services. In these approaches in-network services require access to various control data signalled in different ways to utilise the complete functionality of the orchestrated network. The diversity and amount of required control data rises progressively so that the communication endpoints have to allow more and more access to information about themselves. To ensure information confidentiality and integrity for two communicating end points, the de facto method applied so far is end-to-end encryption of information transferred between the two end points. However, in-network services have then no longer access to the encrypted control data and they cannot accomplish their tasks anymore. Thus, we can either ensure information security or establish smart in-network services. Our paper focuses on this dilemma and introduces an approach where we redesign the smart in-network services to blind but still smart ones that can still correctly process masked control data by using a new kind of cryptographic algorithms. The feasibility of our approach is demonstrated by redesigning the packet forwarding service to a blind one. Additionally, we present our prototype implementation of the blind packet forwarding and evaluate it.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信