Every attempt to access to the Internet through a web browser, email sent, VPN connection, VoIP call, instant message or other use of telecommunications systems involves cryptographic techniques. The most commonly applied technique is asymmetric cryptography, which is generally executed in the background without the user even being aware. It establishes a cryptographic code based on the computational complexity of mathematical problems. However, this type of cryptography, which is widely used in today’s telecommunications systems, is under threat as electronics and computing rapidly develop. The development of fifth-generation cellular networks (5G) is gaining momentum, and given its wide field of application, security requires special attention. This is especially true faced with the development of quantum computers. One solution to this security challenge is to use more advanced techniques to establish cryptographic keys that are not susceptible to attack. An essential part of quantum cryptography, Quantum Key Distribution (QKD) uses the principles of quantum physics to establish and distribute symmetric cryptographic keys between two geographically distant users. QKD establishes information-theoretically secure cryptographic keys that are resistant to eavesdropping when they are created. In this paper, we survey the security challenges and approaches in 5G networks concerning network protocols, interfaces and management organizations. We begin by examining the fundamentals of QKD and discuss the creation of QKD networks and their applications. We then outline QKD network architecture and its components and standards, following with a summary of QKD and post-quantum key distribution techniques and approaches for its integration into existing security frameworks such as VPNs (IPsec and MACsec). We also discuss the requirements, architecture and methods for implementing the FPGA-based encryptors needed to execute cryptographic algorithms with security keys. We discuss the performance and technologies of post-quantum cryptography, and finally, examine reported 5G demonstrations which have used quantum technologies, highlighting future research directions.
Software-defined networking (SDN) has attracted the attention of the research community in recent years, as evidenced by a large number of survey and review papers. The architecture of SDN clearly recognizes three planes: application, control, and data planes. The application plane executes network applications, the control plane regulates the rules for the entire network based on the requests generated by network applications, and based on the set rules, the controller configures the switches in the data plane. The role of the switch in the data plane is to simply forward packets based on the instructions given by the controller. By analyzing the SDN-related research papers, it is observed that research, from the very beginning, is insufficiently focused on the data plane. Therefore, this paper gives a comprehensive overview of the data plane survey with a particular emphasis on the problem of programmability and flexibility. The first part of the survey is dedicated to the evaluation of actual data plane architectures through several definitions and aspects of data plane flexibility and programmability. Then, an overview of the SDN-related research was presented with the aim of identifying the key factors influencing the gradual deviation from the original data plane architectures given with ForCES and OpenFlow specifications. In this paper, we used the term data plane evolution for this deviation. By establishing a correlation between the treated problem and the problem-solving approaches, the limitations of ForCES and OpenFlow data plane architectures were identified. Based on the identified limitations, a generalization of approaches to addressing the problem of data plane flexibility and programmability has been made. By examining the generalized approaches, open issues have been identified, establishing the grounds for future research directions proposal.
Two-wave with diffuse power (TWDP) is one of the most promising models for the description of small-scale fading effects in 5G networks, which employs mmWave band, and in wireless sensor networks deployed in different cavity environments. However, its current statistical characterization has several fundamental issues. Primarily, conventional TWDP parameterization is not in accordance with the model’s underlying physical mechanisms. In addition, available TWDP expressions for PDF, CDF, and MGF are given either in integral or approximate forms, or as mathematically untractable closed-form expressions. Consequently, the existing TWDP statistical characterization does not allow accurate evaluation of system performance in all fading conditions for most modulation and diversity techniques. In this regard, physically justified TWDP parameterization is proposed and used for further calculations. Additionally, exact infinite-series PDF and CDF are introduced. Based on these expressions, the exact MGF of the SNR is derived in a form suitable for mathematical manipulations. The applicability of the proposed MGF for derivation of the exact average symbol error probability (ASEP) is demonstrated with the example of M-ary PSK modulation. The derived M-ary PSK ASEP expression is further simplified for large SNR values in order to obtain a closed-form asymptotic ASEP, which is shown to be applicable for SNR > 20 dB. All proposed expressions are verified by Monte Carlo simulation in a variety of TWDP fading conditions.
The application of the concept of software-defined networks (SDN) has, on the one hand, led to the simplification and reduction of switches price, and on the other hand, has created a significant number of problems related to the security of the SDN network. In several studies was noted that these problems are related to the lack of flexibility and programmability of the data plane, which is likely first to suffer potential denial-of-service (DoS) attacks. One possible way to overcome this problem is to increase the flexibility of the data plane by increasing the depth of programmability of the packet-switching nodes below the level of flow table management. Therefore, this paper investigates the opportunity of using the architecture of deeply programmable packet-switching nodes (DPPSN) in the implementation of a firewall. Then, an architectural model of the firewall based on a hybrid FPGA/CPU data plane architecture has been proposed and implemented. Realized firewall supports three models of DoS attacks mitigation: DoS traffic filtering on the output interface, DoS traffic filtering on the input interface, and DoS attack redirection to the honeypot. Experimental evaluation of the implemented firewall has shown that DoS traffic filtering at the input interface is the best strategy for DoS attack mitigation, which justified the application of the concept of deep network programmability.
11 March 2019 in IEEE Transactions on Vehicular Technology
In order to ensure the required wireless communication system performances, it is necessary to have an efficient communication channel model, which is capable of considering all channel degradation factors fairly. In this paper, a unified hollow-disk geometrically-based stochastic channel model is derived. This model assumes that the scatterers are distributed in hollow-disk area around mobile station. Namely, the scatterer distribution is derived as a projection of ${d}$ -dimensional uniformly distributed scatterers into ${2}$ -dimensional space. According to this generalization, derived model is capable of obtaining uniform circular, uniform ring, uniform hollow-disk, unified disk scattering model as special cases, as well as modeling a whole new group of hollow-disk models. Under assumption of single bounce scattering and omnidirectional antennas at transmitter and receiver, joint PDF of angle-of-departure and angle-of-arrival, as well as the joint PDF of time-of-arrival and angle-of-arrival are derived. Subsequently, the corresponding marginal PDFs are provided in closed form. Thus, derived PDFs are suitable for any position of base station, (base station places inside or outside of scattering region). Proposed model is validated by several measured channels. The curve fitting results shown the high flexibility of the proposed model and outperforming results compared to several other geometric scattering models.
24 August 2020 in IEEE Transactions on Wireless Communications
This article proposes geometrically-based stochastic channel model with scatterers homogeneously distributed within N-dimensional (N-D) hyperspherical-shaped scattering region for single-bounce propagation scenario, with arbitrary positions of base station (BS) and mobile station (MS). For such defined geometrically-based stochastic channel model, the angular and temporal statistics are determined by introducing the projective approach. Accordingly, azimuthal angle and time of arrival marginal PDFs are derived in closed form, while the elevation angle PDF can be delivered numerically in general, and in closed-form for specific environmental parameters. The fidelity of the analytically obtained results is evaluated by their comparison to the corresponding normalized histograms. Also, it is shown that the proposed N-D model can be used to analyze some of the existing channel models like 2-D uniform disk and 3-D uniform (hemi)sphere models. Additionally, by introducing the mentioned projective approach, it is shown that the angular statistics of the proposed N-D model are the same as the angular statistics of some nonuniform 2-D and 3-D models, which is an important property of the proposed model. Such observation enabled us, for the first time in the literature, to determinate angular statistics for geometrically-based stochastic channel models such as inverted parabolic scattering model, 2-D Gaussian model and 3-D Gaussian hemisphere model, for arbitrary positions of BS and MS. Such angular characteristics of proposed channel model are validated through several empirical datasets.