Planning Security-aware Filterless Optical Networks: Invited Paper

Qian Lv,Zuqing Zhu

DOI: https://doi.org/10.1364/acpc.2021.m4c.1

2021-01-01

Abstract:We consider to leverage optical transport network (OTN) encryption to enhance the security in filterless optical networks (FONs), and solve the resulting security-aware multilayer planning. © 2021 The Au

What problem does this paper attempt to address?

On the Multilayer Planning of Filterless Optical Networks With OTN Encryption

Qian Lv,Zuqing Zhu

DOI: https://doi.org/10.1109/TNET.2023.3256409

2023-01-01

IEEE/ACM Transactions on Networking

Abstract:With enhanced cost-effectiveness, filterless optical networks (FONs) have been considered as a promising candidate for future optical infrastructure. However, as the transmission in FON relies on the "select-and-broadcast" scenario, it is more vulnerable to eavesdropping. Therefore, encrypting the communications in FONs will be indispensable, and this can be realized by introducing the optical transport network (OTN) encryption technologies that leverage high-speed encryption cards (ECs) to protect the integrity of OTN payload frames. In this paper, we study the problem of security-aware multilayer planning of FONs with OTN encryption. We first formulate a mixed integer linear programming (MILP) model (i.e., w-MILP) to solve the problem exactly. Then, to reduce the time complexity of problem-solving, we transform w-MILP into two correlated MILP models for establishing fiber trees for an FON (t-MILP) and planning flows in the fiber trees (s-MILP), respectively. The optimization in t-MILP is further transformed into a weighted set partitioning problem, which can be solved time-efficiently. As for s-MILP, we propose a polynomial-time approximation algorithm based on linear programming (LP) relaxation and randomized rounding. Extensive simulations verify the performance of our proposals.
On Security-aware Multilayer Planning for IP-over-Optical Networks with OTN Encryption

Man Song,Jing Zhu,Fen Zhou,Zuqing Zhu

DOI: https://doi.org/10.1109/icc40277.2020.9149075

2020-01-01

Abstract:We study how to achieve cost-effective and security-aware multilayer planning for an optical transport network (OTN) that covers both trusted and untrusted zones and has the option to choose encryption solution deployment (ESD) architectures based on traffic condition. We first formulate an integer linear programming (ILP) model to solve the optimization exactly, and then propose a novel heuristic based on collapsed auxiliary graphs (CAGs) to have improved time-efficiency.
Security-Aware Planning of Packet-Over-Optical Networks in Consideration of OTN Encryption.

Feng Chen,Man Song,Fen Zhou,Zuqing Zhu

DOI: https://doi.org/10.1109/tnsm.2021.3081590

2021-01-01

Abstract:The fast development of cloud computing and Big Data applications has promoted virtualization technologies such as network function virtualization (NFV), which in turn dramatically increased the amount of sensitive data being transmitted over the optical networks for datacenter interconnections (DCIs). To ensure the physical-layer security in DCIs, people have developed optical transport network (OTN) encryption technologies, i.e., leveraging high-speed encryption cards (ECs) to encrypt OTN payload frames. Although experimental studies have confirmed the benefits of ECs in terms of line-speed processing, low latency, and small encryption overhead, the problem of how to utilize them to build a secure packet-over-optical network with high cost-effectiveness has not been explored yet. In this paper, we study how to realize cost-effective and security-aware multilayer planning in a packet-over-optical network that covers both trusted and untrusted zones, in consideration of OTN encryption. We first formulate an integer linear programming (ILP) model to minimize the total capital expenditure (CAPEX) of the multilayer planning, which includes the costs of OTN linecards (LCs), ECs, and bandwidth resources, and solve the optimization exactly. Then, we prove the NP-hardness of the multilayer planning, and to reduce the time complexity, we propose a column generation (CG) model and design a more time-efficient approximation algorithm based on it. Our simulation results confirm the performance and advantages of our CG-based proposal, i.e., it is much more time-efficient than solving the ILP directly, and outperform the existing heuristic in terms of total CAPEX and costs of used LCs and ECs.
Leveraging Multilayer Telemetry to Realize AI-assisted Service Provisioning in IP over Elastic Optical Networks: (invited Paper).

Zuqing Zhu,Bin Niu,Jiawei Kong,Shaofei Tang,Yingcong Li,Hongqiang Fang,Wei Lu

DOI: https://doi.org/10.23919/ps.2019.8817634

2019-01-01

Abstract:We discuss how to design automatic and effective network control and management (NC&M) for IP over elastic optical networks (IPoEONs). We first develop a flexible multilayer inband network telemetry (ML-INT) system and then propose the artificial intelligence (AI) assisted NC&M framework to leverage the ML-INT data for application-aware service provisioning.
On the Survivable Multilayer Planning of Filterless Optical Networks with P2MP Transceivers

Qian Lv,Ruoxing Li,Zuqing Zhu

DOI: https://doi.org/10.1109/jlt.2023.3328328

IF: 4.7

2024-01-01

Journal of Lightwave Technology

Abstract:The rapid development of emerging network services are shifting the major communication scheme in metro-aggregation networks from unicast to in-cast and multicast, which has promoted the development of the point-to-multipoint coherent optical transceivers (P2MP-TRXs). Meanwhile, for its cost-effectiveness and energy-efficiency, filterless optical network (FON) has been considered as a promising optical infrastructure for metro-aggregation networks, and it is naturally compatible with P2MP-TRXs because they both rely on the broadcast-and-select scheme for communications. In this paper, we study the problem of survivable multilayer planning of FONs with P2MP-TRXs and design algorithms to ensure that the planned FON can protect itself against single-link failures. We first formulate a mixed integer linear programming (MILP) model to jointly optimize the routing of working and backup lightpaths of traffic demands, and the allocation of P2MP-TRXs, assignment of subcarriers (SCs) to P2MP-TRXs, spectrum assignment on fiber trees for setting up the lightpaths, such that the capital expenditures (CAPEX) of the planned FON is minimized. Then, to solve the problem more time-efficiently, we propose a polynomial-time heuristic based on auxiliary graphs (AGs) and lightpath grouping. Extensive simulations verify the performance of our proposals and indicate that they can outperform existing benchmarks.
FULLY OPTICAL NETWORKS FOR QUANTUM ENCRYPTION KEY TRANSMISSION SYSTEMS

Vagif Ali Maharramov,Tofig Magomed ogly Mansurov,,

DOI: https://doi.org/10.36724/2664-066x-2022-8-4-14-17

2022-01-01

SYNCHROINFO JOURNAL

Abstract:The development of experimental quantum physics in recent years has led to the fact that the abstract ideas of quantum mechanics began to find practical application for the protection of information in a rapidly developing field such as fiber-optic communication lines (FOCL). On the basis of (smart) translucent SMART mirrors, optical splitters, switches, schemes of unidirectional, counter, bidirectional and universal multiplexers and demultiplexers, and the principle of distributing quantum encryption keys between authorized users have been developed. It is shown that it is possible to improve the speed of the process of switching and multiplexing of information flows in comparison with traditional mechanical switches. The paper proposes a circuit solution for an all-optical network (All-Optical Networks – AON) with the possibility of generating and distributing quantum encryption keys between authorized users. The aim of this work is to develop a principle for constructing quantum systems for the secure distribution of encryption keys on all-optical networks between selected (4 or more) users, as well as methods for generating, transmitting and receiving these keys in real time. In this regard, there is a need to develop a switch and a multiplexer of information flows.
Security Issues and Possible Solutions of Future-Oriented Optical Access Networks for 5G and Beyond

Xiaoxue Gong,Qihan Zhang,Xu Zhang,Ran Xuan,Lei Guo

DOI: https://doi.org/10.1109/mcom.011.2100044

IF: 9.03

2021-06-01

IEEE Communications Magazine

Abstract:As one of the promising solutions for conveying high-bandwidth and low-latency services such as 5G, optical access networks face severe security challenges due to their tree-based topology and broadcast characteristics in downstream transmission. Even though physical-layer security mechanisms leverage the advantages of flexible implementation, low complexity, and full information confidentiality, these security enhancement schemes based on digital signal processing techniques are limited by the electrical bottleneck, leading to low processing speed for encryption and incapability of effectively detecting network attacks. In this article, we first discuss the potential security threats and present several existing solutions against security threats in optical access networks from the perspective of the medium access control and physical layers. We then elaborate novel optical-layer solutions based on optical signal processing techniques including all-optical encryption, optical layer authentication, and optical domain intrusion detection mechanisms. In particular, numerical simulation results have verified the feasibility and effectiveness of the proposed solutions. Finally, we conclude this article and propose future challenges of security enhancement of optical access networks supporting 5G and beyond.

telecommunications,engineering, electrical & electronic
Introduction to the Future Optical Networks and Communications Symposium Special Issue

Daniel Kilper,Lena Wosinska,Zuqing Zhu

DOI: https://doi.org/10.1364/jocn.504006

IF: 4.508

2023-01-01

Journal of Optical Communications and Networking

Abstract:This special issue contains a collection of invitation-only extensions based on papers presented at the Future Optical Networks and Communications Symposium in the IEEE Future Network World Forum held 12–14 October 2022 in Montreal, Canada. We present a brief introduction followed by an overview of the topics covered in the papers.
Security enhanced routing and spectrum allocation against crosstalk attacks for confidential lightpath in elastic optical networks

Liyazhou Hu,Wei Wang,Yuanyuan Pan,Tianhe Liu,Yajie Li,Yongli Zhao,Jianqing Li

DOI: https://doi.org/10.1364/oe.511055

IF: 3.8

2024-02-16

Optics Express

Abstract:Liyazhou Hu, Wei Wang, Yuanyuan Pan, Tianhe Liu, Yajie Li, Yongli Zhao, Jianqing Li Elastic optical network (EON) is a critical transmission infrastructure for emerging new applications due to its spectral efficiency and ... [Opt. Express 32, 7254-7275 (2024)]

optics
Programmable Filterless Optical Networks: Architecture, Design, and Resource Allocation

Ehsan Etezadi,Carlos Natalino,Christine Tremblay,Lena Wosinska,Marija Furdek

DOI: https://doi.org/10.1109/tnet.2023.3319746

2024-01-01

IEEE/ACM Transactions on Networking

Abstract:Filterless optical networks (FONs) are a cost-effective optical networking technology that replaces reconfigurable optical add-drop multiplexers, used in conventional, wavelength-switched optical networks (WSONs), by passive optical splitters and couplers. FONs follow the drop-and-waste transmission scheme, i.e., broadcast signals without filtering, which generates spectrum waste. Programmable filterless optical networks (PFONs) reduce this waste by equipping network nodes with programmable optical white box switches that support arbitrary interconnections of passive elements. Cost-efficient PFON solutions require optimal routing, modulation format and spectrum assignment (RMSA) to connection requests, as well as optimal design of the node architecture. This paper presents an optimization framework for PFONs. We formulate the RMSA problem in PFONs as a single-step integer linear program (ILP) that jointly minimizes the total spectrum and optical component usage. As RMSA is an NP-complete problem, we propose a two-step ILP formulation that addresses the RMSA sub-problems separately and seeks sub-optimal solutions to larger problem instances in acceptable time. Simulation results indicate a beneficial trade-off between component usage and spectrum consumption in proposed PFON solutions. They use up to 64% less spectrum than FONs, up to 84% fewer active switching elements than WSONs, and up to 81% fewer optical amplifiers at network nodes than FONs or WSONs.

telecommunications,computer science, theory & methods,engineering, electrical & electronic, hardware & architecture
On Multi-Layer Restoration in Optical Networks with Encryption Solution Deployment

Xin Jin,Wei Lu,Siqi Liu,Zuqing Zhu

DOI: https://doi.org/10.1364/ofc.2018.th2a.39

2018-01-01

Abstract:We consider the scenario in which an optical network with encryption solution deployment can be affected by electrical layer failures, and propose an algorithm to improve the cost-effectiveness of multi-layer restoration in it.
Network Planning with Bilevel Optimization to Address Attacks to Physical Infrastructure of SDN

Qian Lv,Jing Zhu,Fen Zhou,Zuqing Zhu

DOI: https://doi.org/10.1109/icc40277.2020.9149042

2020-01-01

Abstract:It is known that the design of the control plane (CP) is vital in the network planning for software-defined networking (SDN), while to improve throughput and enlarge geographical coverage, optical networks are commonly used as the physical infrastructure of SDN. However, physical-layer attacks can disrupt the operation of an optical network and thus complicate the CP design. In this work, we consider planned physical-layer attacks when designing the CP of an SDN that uses an optical network as its physical infrastructure. We first show that the CP design problem should be modeled as a bilevel optimization, where the network planner designs the CP with the minimum vulnerability to physical-layer attacks (i.e., the upper-level optimization), while the attacker plans and launches attacks to disrupt the designed CP (i.e., the lower-level optimization). Then, the bilevel mode is transformed into a mixed integer linear programming (MILP) model, which can solve the CP design problem exactly. We also propose a heuristic to tackle the problem time-efficiently.
On Network Design and Planning 2.0 for Optical-computing-enabled Networks

Dao Thanh Hai,Isaac Woungang

DOI: https://doi.org/10.48550/arXiv.2402.11618

2024-02-18

Networking and Internet Architecture

Abstract:In accommodating the continued explosive growth in Internet traffic, optical core networks have been evolving accordingly thanks to numerous technological and architectural innovations. From an architectural perspective, the adoption of optical-bypass networking in the last two decades has resulted in substantial cost savings, owning to the elimination of massive optical-electrical optical interfaces. In optical-bypass framework, the basic functions of optical nodes include adding (dropping) and cross-connecting transitional lightpaths. Moreover, in the process of cross-connecting transiting lightpaths through an intermediate node, these lightpaths must be separated from each other in either time, frequency or spatial domain, to avoid unwanted interference which deems to deteriorate the signal qualities. In light of recently enormous advances in photonic signal processing / computing technologies enabling the precisely controlled interference of optical channels for various computing functions, we propose a new architectural paradigm for future optical networks, namely, optical-computing-enabled networks. Our proposal is defined by the added capability of optical nodes permitting the superposition of transitional lightpaths for computing purposes to achieve greater capacity efficiency. Specifically, we present two illustrative examples highlighting the potential benefits of bringing about in-network optical computing functions which are relied on optical aggregation and optical XOR gate. The new optical computing capabilities armed at optical nodes therefore call for a radical change in formulating networking problems and designing accompanying algorithms, which are collectively referred to as optical network design and planning 2.0 so that the capital and operational efficiency could be fully unlocked.
OBS Based Transparent Optical Networking Policy (Invited)

Xu Anshi,Zhengbin, Li

DOI: https://doi.org/10.1109/aoe.2006.307317

2006-01-01

Abstract:As optically random access memory is not commercially available, and with the fiber being cheaper and cheaper, the core fiber bandwidth utilization is not the key factor of the network, how to use the huge bandwidth flexibly and efficiently is one of the hot topics of optical networks. Optical burst switching (OBS) is thought to be the best way to adapt the bursty traffic, and can be statistically using the optical resources, so that OBS based transparent optical network attracting more and more attentions. However, the precondition of most of the OBS networking solution is based on wavelength conversion, which is limited by the nonlinear of materials. We proposed a novel networking policy by using dual fiber links server model along with traffic spacing mechanism (TSM) by address differentiation, the transmitting IP directly in optical domain for traffic data between physically adjacent nodes, with no necessary burst assembling (NABAN). The theoretical results show that this method can improve network performance and be practically used in fields.
Virtual Optical Network Embedding (VONE) Over Elastic Optical Networks

Long Gong,Zuqing Zhu

DOI: https://doi.org/10.1109/jlt.2013.2294389

IF: 4.7

2014-02-01

Journal of Lightwave Technology

Abstract:Based on the concept of infrastructure as a service, optical network virtualization can facilitate the sharing of physical infrastructure among different users and applications. In this paper, we design algorithms for both transparent and opaque virtual optical network embedding (VONE) over flexible-grid elastic optical networks. For transparent VONE, we first formulate an integer linear programming (ILP) model that leverages the all-or-nothing multi-commodity flow in graphs. Then, to consider the continuity and consecutiveness of substrate fiber links’ (SFLs’) optical spectra, we propose a layered-auxiliary-graph (LAG) approach that decomposes the physical infrastructure into several layered graphs according to the bandwidth requirement of a virtual optical network request. With LAG, we design two heuristic algorithms: one applies LAG to achieve integrated routing and spectrum assignment in link mapping (i.e., local resource capacity (LRC)-layered shortest-path routing LaSP), while the other realizes coordinated node and link mapping using LAG (i.e., layered local resource capacity(LaLRC)-LaSP). The simulation results from three different substrate topologies demonstrate that LaLRC-LaSP achieves better blocking performance than LRC-LaSP and an existing benchmark algorithm. For the opaque VONE, an ILP model is also formulated. We then design a LRC metric that considers the spectrum consecutiveness of SFLs. With this metric, a novel heuristic for opaque VONE, consecutiveness-aware LRC-K shortest-path-first fit (CaLRC-KSP-FF), is proposed. Simulation results show that compared with the existing algorithms, CaLRC-KSP-FF can reduce the request blocking probability significantly.

engineering, electrical & electronic,optics,telecommunications
Network Function Virtualization in Optical Inter-Datacenter Elastic Optical Networks

Wei Lu,Menglu Zeng,Wenjian Fang,Zuqing Zhu

2017-01-01

Abstract:We first explain the motivations of studying network function virtualization (NFV) in inter-datacenter elastic optical networks (IDC-EONs). Then, we analyze the challenges for provisioning virtual network function forwarding graphs (vNF-FGs) in IDC-EONs, and give insights on how to customize vNF-FG orchestration and optimize IT and spectrum resource allocations jointly. OCIS codes: (060.1155) All-optical networks; (060.4251) Networks, assignment and routing algorithms.
Convex optimization-based high-speed and security joint optimization scheme in optical access networks

Anqi Hu,Lu Gan,Lei Guo,Hao Yan,Junfan Hu

DOI: https://doi.org/10.1364/oe.512191

IF: 3.8

2024-02-11

Optics Express

Abstract:Anqi Hu, Lu Gan, Lei Guo, Hao Yan, Junfan Hu Data rate and security are essential performance metrics for passive optical networks (PON). However, existing optical access networks lack ... [Opt. Express 32, 6748-6764 (2024)]

optics
Network Nervous System: When Multilayer Telemetry Meets AI-assisted Service Provisioning : (Invited Paper)

Jiawei Kong,Bin Niu,Shaofei Tang,Yingcong Li,Hongqiang Fang,Wei Lu,Zuqing Zhu

DOI: https://doi.org/10.1109/ICOCN.2019.8934891

2019-01-01

Abstract:We present a network nervous system (NNS) that leverages hybrid centralized/distributed processing to achieve automatic and effective network control and management (NC&M) for realizing artificial intelligence (AI) assisted service provisioning in IP over elastic optical networks (IPoEONs).
Research on Key Distribution and Encryption Control System of Optical Network Physical Layer

Cui Chen,Yang Zhe,Yang Siyu,Cheng Tao,Jiang Liqiong,Wang Xiangqing

DOI: https://doi.org/10.1109/wccct52091.2021.00008

2021-01-01

Abstract:With the wide application of large-capacity and high-speed optical networks, its security has become a current research focus. Due to the limitations of traditional key distribution and encryption schemes, this paper proposes an innovative key distribution and encryption control scheme based on physical layer channel feature extraction and analysis. First of all, the transceiver terminal extracts the physical characteristics of the fiber channel separately, and generates a consensus key through quantization coding. Second, use the generated key base to encrypt the transmission sequence, map the Quadrature Phase Shift Keying (QPSK) signal to the high-order 1024×1024-QAM signal, and use the noise stream to perform the high-order QAM. The signal is flooded. The system utilizes channel non-replication and randomness of channel noise, the security and randomness of the key are good, and the key formation rate is high and the key generation equipment is simple. The system uses high-order QAM modulation, which increases the security of the system. The experimental results show that the coding rate of the key generated by the system reaches 400kb/s, and the coding performance of the key is better; the operating key is generated by the key base extension, which has strong anti-interception ability; the system has a low bit error rate and secure transmission Good performance.
Optical Onion Routing

Anna Engelmann,Admela Jukan

DOI: https://doi.org/10.1109/iccnc.2017.7876148

2017-01-01

Abstract:As more and more data is transmitted in the configurable optical layer, – whereby all optical switches forward packets without electronic layers involved, we envision privacy as the intrinsic property of future optical networks. In this paper, we propose Optical Onion Routing (OOR) and forwarding techniques, inspired by the onion routing in the Internet layer, - the best known realization of anonymous communication today, – but designed with specific features innate to optical networks. We propose to design the optical anonymization network system with a new optical anonymization node architecture, including the optical components and their electronic counterparts to realize layered encryption. We propose modification to the secret key generation using Linear Feedback Shift Register (LFSR), - able to utilize different primitive irreducible polynomials, and the usage optical XOR operation as encryption, an important optical technology coming of age. We prove formally that, for the proposed encryption techniques and distribution of secret information, the optical onion network is perfectly private and secure. The paper aims at providing practical foundations for privacy-enhancing optical network technologies.

Planning Security-aware Filterless Optical Networks: Invited Paper

On the Multilayer Planning of Filterless Optical Networks With OTN Encryption

On Security-aware Multilayer Planning for IP-over-Optical Networks with OTN Encryption

Security-Aware Planning of Packet-Over-Optical Networks in Consideration of OTN Encryption.

Leveraging Multilayer Telemetry to Realize AI-assisted Service Provisioning in IP over Elastic Optical Networks: (invited Paper).

On the Survivable Multilayer Planning of Filterless Optical Networks with P2MP Transceivers

FULLY OPTICAL NETWORKS FOR QUANTUM ENCRYPTION KEY TRANSMISSION SYSTEMS

Security Issues and Possible Solutions of Future-Oriented Optical Access Networks for 5G and Beyond

Introduction to the Future Optical Networks and Communications Symposium Special Issue

Security enhanced routing and spectrum allocation against crosstalk attacks for confidential lightpath in elastic optical networks

Programmable Filterless Optical Networks: Architecture, Design, and Resource Allocation

On Multi-Layer Restoration in Optical Networks with Encryption Solution Deployment

Network Planning with Bilevel Optimization to Address Attacks to Physical Infrastructure of SDN

On Network Design and Planning 2.0 for Optical-computing-enabled Networks

OBS Based Transparent Optical Networking Policy (Invited)

Virtual Optical Network Embedding (VONE) Over Elastic Optical Networks

Network Function Virtualization in Optical Inter-Datacenter Elastic Optical Networks

Convex optimization-based high-speed and security joint optimization scheme in optical access networks

Network Nervous System: When Multilayer Telemetry Meets AI-assisted Service Provisioning : (Invited Paper)

Research on Key Distribution and Encryption Control System of Optical Network Physical Layer

Optical Onion Routing