The huge amount of traffic transportable by the next generation optical network is vulnerable to attacks, as is discerned from an alarmingly increase of incidents. The types of attack are expected to range from the typical eavesdropping and service denial to more sophisticated source mimicking. As a consequence, modern encrypted methods refuge to highly sophisticated methods that emanate from quantum mechanics, known as quantum cryptography. However, the sophistication and elegance of quantum-cryptography makes the assumption that the transmission medium and the components involved on the link are perfect and that the properties of photons and the signal intensity do not change during propagation over many kilometers. Therefore, a practical implementation of Q-C may exhibit its own vulnerabilities due to non-linear interactions between photons and medium. Therefore, in addition to the sophistication of QKD and encryption algorithms, an additional function is needed that detects malicious intervention on the transmission link as well as a countermeasure strategy that outsmarts the attacker. In this paper, we consider a practical optical signal that consists of multiple photons, we consider a pragmatic medium with nonlinearities, scattering and absorption centers. We describe a case of service denial with Q-C, a method by which an attack is detected, and we develop a countermeasure strategy outsmarting the attacker. Our method assumes that the data channel is encrypted using sophisticated algorithms.
The huge amount of traffic transportable by the next generation optical network is vulnerable to attacks, as is discerned from an alarmingly increase of incidents. The types of attack are expected to range from the typical eavesdropping and service denial to more sophisticated source mimicking. As a consequence, modern encrypted methods refuge to highly sophisticated methods that emanate from quantum mechanics, known as quantum cryptography. However, the sophistication and elegance of quantum-cryptography makes the assumption that the transmission medium and the components involved on the link are perfect and that the properties of photons and the signal intensity do not change during propagation over many kilometers. Therefore, a practical implementation of Q-C may exhibit its own vulnerabilities due to non-linear interactions between photons and medium. Therefore, in addition to the sophistication of QKD and encryption algorithms, an additional function is needed that detects malicious intervention on the transmission link as well as a countermeasure strategy that outsmarts the attacker. In this paper, we consider a practical optical signal that consists of multiple photons, we consider a pragmatic medium with nonlinearities, scattering and absorption centers. We describe a case of service denial with Q-C, a method by which an attack is detected, and we develop a countermeasure strategy outsmarting the attacker. Our method assumes that the data channel is encrypted using sophisticated algorithms.
Optical communication networks transport an enormous aggregate client traffic, a good part of which is highly sensitive. As such, the optical signal in the fiber medium becomes attractive to bad actors in an attempt to tap the fiber or a component on the path in order to eavesdrop, source mimic, or attack to cause service denial. Therefore, it is important that the network has built-in security features to monitor the channel integrity and to also detect if and when unauthorized intervention has taken place. It is also important that the network is intelligent to countermeasure bad actors. Because the integrity of optical channels in are also affected by component degradation, photon-matter interactions and other non-linear phenomena, the network should be able to differentiate between malicious interventions and parametric degradations. In this paper we identify observable performance parameters and predictors, we describe a estimating method for in-line parameter monitoring, we conclusively distinguish between component degradations and intervention of a malicious eavesdropper and we describe countermeasure mechanisms.
The increased demand of data services within the last few years has prompted a commensurate explosion in transportable bandwidth, most of which contain sensitive information, personal data, bank accounts, credit card numbers, proprietary documents, and more. As a result, there are two types of security in communications, securing user data and securing the physical network. The first is addressed with encryption algorithms, the unbreakability of which does not depends so much on the sophistication of the algorithm but on the difficulty to break it using a sequential computer; that is, it capitalizes on the inability of the attacker to use a fast supercomputer. The second is not a well addressed topic, particularly in modern fiber-optic networks. One attempt to create an unbreakable cipher-text is quantum cryptography that emanated from quantum mechanics; this method capitalizes on the no-cloning principle of particular characteristics of photons, such as polarization. In this paper, we examine the security of advanced optical networks, fiber-optic and free space optical (FSO). We describe quantum cryptography and the quantum key distribution, including the principle of teleportation, we identify vulnerabilities and we discuss detection mechanisms and countermeasure strategies against attacks on the physical network.
The last two decades have witnessed an exciting advanced research field that stems from non-classical atomic theory, quantum mechanics. This field promises an important applicability in secure data communications, known as quantum cryptography. Quantum cryptography takes advantage of the inherent random polarization state of single photons, which is not reproducible by a third party or an eavesdropper located between the source and the destination. Thus, when polarization states of photons are associated with binary logic an algorithm may intelligently developed according to which a cryptographic key is disseminated by the source terminal to the destination. This is a process known as quantum key distribution. However, as photons propagate in a non-linear medium such as fiber, their polarization state does not remain intact and thus the quantum key distribution and quantum cryptography becomes vulnerable to attacks. In this paper we consider the applicability of quantum cryptography in a pragmatic fiber-optic medium and in a popular communication network topology. We identify major weaknesses for each step of the quantum key distribution process, and also potential attacks to incapacitate quantum cryptography in fiber communications, so that better countermeasure strategies can be developed.
Network security concerns have recently been increased due to the vast amount of information that flows in a single fiber. At the application layer, data security relies on end-user encryption algorithms, many of which are known to be vulnerable, and authentication algorithms are not foolproof as the sophistication of eavesdroppers and unauthorized bad actors increases. As a result, the communications link may be attacked by eavesdroppers to access data, to mimic the source, or to cause service denial. To accomplish this however, the transmission link must be compromised. Therefore, if an a priori link and channel signature has been established at the receiver, then an unauthorized intervention is possible to be detected, reported and counteracted. In this paper we provide an analysis of the link and channel parameters that affect the signal performance, which also constitute the identification signature of the optical channel. When the medium is compromised, the channel parameters are affected and thus the channel performance. We also develop a model and we simulate conditions of channel attack
Optical communication networks transport an enormous aggregate client traffic, a good part of which is highly sensitive. As such, the optical signal in the fiber medium becomes attractive to bad actors in an attempt to tap the fiber or a component on the path in order to eavesdrop, source mimic, or attack to cause service denial. Therefore, it is important that the network has built-in security features to monitor the channel integrity and to also detect if and when unauthorized intervention has taken place. It is also important that the network is intelligent to countermeasure bad actors. Because the integrity of optical channels in are also affected by component degradation, photon-matter interactions and other non-linear phenomena, the network should be able to differentiate between malicious interventions and parametric degradations. In this paper we identify observable performance parameters and predictors, we describe a estimating method for in-line parameter monitoring, we conclusively distinguish between component degradations and intervention of a malicious eavesdropper and we describe countermeasure mechanisms.
Dense wavelength division multiplexing optical networks transport a huge aggregate traffic exceeding Tbps per single fiber, and passive optical network technology has been extended to include the residential and enterprise network layer with fiber-to-the premises. Because this network allows for multimedia and extremely high data rates to end-users, optical communications security is important not only on the client and the node management layers, but also on the physical layer. Thus, cyber-security becomes also important in optical networks, including unbreakable cipher keys, cipher key distribution, identification of malicious actors, source authentication, physical link signature, and countermeasure strategies. In this paper we overview the security of the WDM optical network. We discuss advanced cryptographic methods that stem from quantum mechanics, known as quantum cryptography, and we identify specific vulnerabilities. We also look into the security of the next-generation optical network.