Scipediacontent: Scipediacontent moved page Draft Content 404665583 to Gharbaoui et al 2011a

2021-02-16T09:21:10Z

Scipediacontent moved page Draft Content 404665583 to Gharbaoui et al 2011a

Scipediacontent: Created page with " == Abstract == The path computation element (PCE) architecture has been proposed to effectively enable multi-domain traffic engineering (TE) in generalized multiprotocol lab..."

2021-02-16T09:21:08Z

Created page with " == Abstract == The path computation element (PCE) architecture has been proposed to effectively enable multi-domain traffic engineering (TE) in generalized multiprotocol lab..."

New page

== Abstract ==

The path computation element (PCE) architecture has been proposed to effectively enable multi-domain traffic engineering (TE) in generalized multiprotocol label switching (GMPLS) networks while providing an adequate level of confidentiality among domains. However, a malicious utilization of the procedures defined within the PCE architecture might affect the confidentiality of network domain information in a multi-domain multi-carrier network scenario. This paper discusses the critical issues of the PCE architecture in terms of confidentiality. A two-step authorization scheme, named the behavior-based PCE authorization policy (BPAP), is proposed. The BPAP includes a novel add-on PCE component and a central authorization policy server to protect against confidentiality breaking. The scheme is based on the PCE protocol (PCEP) client behavior analysis and includes attack pattern detection procedures and possible partial information filtering of the reply message. The applicability of the BPAP scheme is validated in wavelength switched optical networks (WSONs) through simulations focusing on the exchange of a restricted set of available resources. Finally, a BPAP implementation is experimentally evaluated, showing the efficiency of the two-step scheme in terms of scalability, capability to limit the discovery of critical information, and reactivity to confidential attacks.

== Original document ==

The different versions of the original document can be found in:

* [http://dx.doi.org/10.1364/JOCN.3.000465 http://dx.doi.org/10.1364/JOCN.3.000465]

* [https://www.openaccessrepository.it/record/22200/files/fulltext.pdf https://www.openaccessrepository.it/record/22200/files/fulltext.pdf]

* [http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000005759822 http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000005759822],
: [https://www.infona.pl/resource/bwmeta1.element.ieee-art-000005759822 https://www.infona.pl/resource/bwmeta1.element.ieee-art-000005759822],
: [https://www.osapublishing.org/jocn/abstract.cfm?URI=jocn-3-5-465 https://www.osapublishing.org/jocn/abstract.cfm?URI=jocn-3-5-465],
: [https://academic.microsoft.com/#/detail/2152271317 https://academic.microsoft.com/#/detail/2152271317]

* [https://www.osapublishing.org/viewmedia.cfm?URI=jocn-3-5-465&seq=0 https://www.osapublishing.org/viewmedia.cfm?URI=jocn-3-5-465&seq=0],
: [http://dx.doi.org/10.1364/jocn.3.000465 http://dx.doi.org/10.1364/jocn.3.000465]

← Older revision	Revision as of 09:21, 16 February 2021
(No difference)

Gharbaoui et al 2011a - Revision history

Scipediacontent: Scipediacontent moved page Draft Content 404665583 to Gharbaoui et al 2011a

Scipediacontent: Created page with " == Abstract == The path computation element (PCE) architecture has been proposed to effectively enable multi-domain traffic engineering (TE) in generalized multiprotocol lab..."