The specific demands of supply chains built upon large and complex IoT systems, make it a must to design a coordinated framework for cyber resilience provisioning, intended to guarantee trusted supply chains of ICT systems, built upon distributed, dynamic, potentially insecure, and heterogeneous ICT infrastructures. As such, the solution proposed in this paper is envisioned to deal with the whole supply chain system components, from the IoT ecosystem to the infrastructure connecting them, addressing security and privacy functionalities related to risks and vulnerabilities management, accountability, and mitigation strategies, as well as security metrics and evidence-based security assurance. In this paper, we present FISHY as a preliminary architecture that is designed to orchestrate existing and beyond state-of-the-art security appliances in composed ICT scenarios. To this end, the FISHY architecture leverages the capabilities of programmable networks and IT infrastructure through seamless orchestration and instantiation of novel security services, both in real-time and proactively. The paper also includes a thorough business analysis to go far beyond the technical benefits of a potential FISHY adoption, as well as three real-world use cases highlighting the envisioned benefits of a potential FISHY adoption.

The wide adoption of the recently coined fog and edge computing paradigms alongside conventional cloud computing creates a novel scenario, known as the cloud continuum, where services may benefit from the overall set of resources to optimize their execution. To operate successfully, such a cloud continuum scenario demands for novel management strategies, enabling a coordinated and efficient management of the entire set of resources, from the edge up to the cloud, designed in particular to address key edge characteristics, such as mobility, heterogeneity and volatility. The design of such a management framework poses many research challenges and has already promoted many initiatives worldwide at different levels. In this paper we present the results of one of these experiences driven by an EU H2020 project, focusing on the lessons learnt from a real deployment of the proposed management solution in three different industrial scenarios. We think that such a description may help understand the benefits brought in by a holistic cloud continuum management and also may help other initiatives in their design and development processes.

This contribution deals with the RWA (routing and wavelength assignment) in semi-transparent optical networks. In semi-transparent networks, a parameter called maximum transmission distance (MTD) is used to indicate the distance reachable in wavelength continuity. When for a given lightpath, the signal cannot be detected at the destination node a regenerator has to be installed in an intermediate node. The regenerator breaks up the optical continuity and the optical network becomes a semi-transparent optical network. The new RWA mechanism proposed in this paper will take into account the physical impairment such as the Maximum Transmission Distance (MTD). Moreover this new RWA algorithm will be based on the Prediction-Based Routing (PBR) mechanism and will take into account the routing inaccuracy problem. The goal of the proposed algorithm will be both, to reduce the number of blocked connections due to the routing inaccuracy problem and to select routes that fulfil the MTD physical impairment.

The design of new inter-domain optical routing protocols may start from scratch, or on the contrary exploits all the research already developed in IP networks with the Border Gateway Protocol (BGP). Even though the network premises under which BGP was conceived have drastically changed, the pervasive deployment of BGP makes almost impossible its replacement, hence everything indicates that BGP-based routing will remain present in the coming years. In light of this, the approach often used for distributing reachability information and routing inter-domain connections below the IP layer has been to propose extensions to the BGP protocol, what unfortunately exports all well-known BGP weaknesses to these routing scenarios. In this paper we deeply analyze all these problems in order the reader to get a clear idea of the existing limitations inherent to the BGP, before exploring the routing problem in optical networks. Then, focusing on the optical layer we will demonstrate that current optical extensions of BGP do not meet the particular optical layer constraints. We then propose minor, though effective, changes to a path vector protocol overall offering a promising line of work and a simple solution designed to be deployed on a multi-domain and multi-layer scenario. (C) 2013 Elsevier B.V. All rights reserved.