In the era of the fifth-generation fixed network (F5G), optical networks must be developed to support large bandwidth, low latency, high reliability, and intelligent management. Studies have shown that software-defined optical networks (SDON) and artificial intelligence can help improve the performance and management capabilities of optical networks. Inside a large-scale optical network, many types of alarms are reported that indicate network anomalies. Relationships between the alarms are complicated, making it difficult to accurately locate the source of the fault(s). In this work, we propose a knowledge-guided fault localization method, using network alarm knowledge to analyze network abnormalities. Our method introduces knowledge graphs (KGs) into the alarm analysis process. We also propose a reasoning model based on graph neural network (GNN), to perform relational reasoning on alarm KGs and locate the network faults. We develop an ONOS-based SDON platform for experimental verification, which includes a set of processes for the construction and application of alarm KGs. The experimental results show the proposed method has high accuracy and provide motivation for the industry-scale use of KGs for alarm analysis and fault localization.

Edge computing provides computing capability at close-user proximity to reduce service latency for end users. To improve the efficiency of edge computing infrastructures, geographically-distributed edge datacenters can co-work with each other and with cloud datacenters, forming a new paradigm referred to as cooperative edge-cloud computing. In this context, applications typically run on a virtual machine (VM) that can be replicated at multiple sites, and thus user traffic can be served at all the sites where corresponding VMs reside. For the performance of many applications, latency is a critical parameter. In this work, taking applications latencies as the primary constraint, we model the problem of VM placement and workload assignment as a mixed integer linear program and develop heuristic algorithms accordingly. The goal is to minimize the consumption of information technology (IT) infrastructures for placing VMs in cooperative edge-cloud computing, while meeting the heterogeneous latency demands of different applications. Some preliminary results indicate that edge datacenters resource efficiency can be optimized by proper cross-site VM placement and workload re-direction.

In this Letter, we present a scheme for detecting fiber-bending eavesdropping based on feature extraction and machine learning (ML). First, 5-dimensional features from the time-domain signal are extracted from the optical signal, and then a long short-term memory (LSTM) network is applied for eavesdropping and normal event classification. Experimental data are collected from a 60 km single-mode fiber transmission link with eavesdropping implemented by a clip-on coupler. Results show that the proposed scheme achieves a 95.83% detection accuracy. Furthermore, since the scheme focuses on the time-domain waveform of the received optical signal, additional devices and a special link design are not required.

Network slicing is a key enabling technology to realize the provisioning of customized services in 5G paradigm. Due to logical isolation instead of physical isolation, network slicing is facing a series of security issues. Side Channel Attack (SCA) is a typical attack for slices that share resources in the same hardware. Considering the risk of SCA among slices, this paper investigates how to effectively allocate heterogeneous resources for the slices under their different security requirements. Then, a SCAaware Resource Allocation (SCA-RA) algorithm is proposed for Ultra-reliable and Low-latency Communications (URLLC) and Enhanced Mobile Broadband (eMBB) slices in 5G RAN. The objective is to maximize the number of slices accommodated in 5G RAN. With dynamic slice requests, simulation is conducted to evaluate the performance of the proposed algorithm in two different network scenarios. Simulation results indicate that compared with benchmark, SCA-RA algorithm can effectively reduce blocking probability of slice requests. In addition, the usage of IT and transport resources is also optimized.

We propose and experimentally demonstrate a compatible physical-layer secure optical communication (PLSOC) system that integrates self-adaptive physical-layer key distribution (PLKD) and encryption (PLE) in optical coherent communication. Based on bit error rate difference of QAM signals mapped by asymmetric basis state Y-00 protocol, the secret key can be secretly exchanged over public fiber links without the pre-shared keys. Moreover, we perform a parameter self-adaptive strategy for practical and dynamic PLKD. The security of the key is evaluated in the case of a fiber-tapping attack. A secure hash algorithm, SHA3-512, is used to perform privacy amplification to obtain the virtually secure key. An error-free PLKD rate reaches 39.3 Kbits/s over 300 km ultra-low loss fiber. We experimentally enable the integration of the proposed PLKD scheme and quantum noise stream cipher (QNSC) with a single wavelength, same system. Q factor penalty of the integration system compared to the QNSC system is 3.7 dB (optical back-to-back) and 4.8 dB (300 km) respectively. By exploiting a common hardware platform, with the same wavelength, the proposed PLSOC system addresses the problem that PLKD and PLE are separately performed through independent optical fiber links or wavelengths. Since only digital signal processing is used, the scheme does not require extra hardware.