Optical communication networks transport an enormous aggregate client traffic, a good part of which is highly sensitive. As such, the optical signal in the fiber medium becomes attractive to bad actors in an attempt to tap the fiber or a component on the path in order to eavesdrop, source mimic, or attack to cause service denial. Therefore, it is important that the network has built-in security features to monitor the channel integrity and to also detect if and when unauthorized intervention has taken place. It is also important that the network is intelligent to countermeasure bad actors. Because the integrity of optical channels in are also affected by component degradation, photon-matter interactions and other non-linear phenomena, the network should be able to differentiate between malicious interventions and parametric degradations. In this paper we identify observable performance parameters and predictors, we describe a estimating method for in-line parameter monitoring, we conclusively distinguish between component degradations and intervention of a malicious eavesdropper and we describe countermeasure mechanisms.
Optical communication networks transport an enormous aggregate client traffic, a good part of which is highly sensitive. As such, the optical signal in the fiber medium becomes attractive to bad actors in an attempt to tap the fiber or a component on the path in order to eavesdrop, source mimic, or attack to cause service denial. Therefore, it is important that the network has built-in security features to monitor the channel integrity and to also detect if and when unauthorized intervention has taken place. It is also important that the network is intelligent to countermeasure bad actors. Because the integrity of optical channels in are also affected by component degradation, photon-matter interactions and other non-linear phenomena, the network should be able to differentiate between malicious interventions and parametric degradations. In this paper we identify observable performance parameters and predictors, we describe a estimating method for in-line parameter monitoring, we conclusively distinguish between component degradations and intervention of a malicious eavesdropper and we describe countermeasure mechanisms.
Optical communication networks transport an enormous aggregate client traffic, a good part of which is highly sensitive. As such, the optical signal in the fiber medium becomes attractive to bad actors in an attempt to tap the fiber or a component on the path in order to eavesdrop, source mimic, or attack to cause service denial. Therefore, it is important that the network has built-in security features to monitor the channel integrity and to also detect if and when unauthorized intervention has taken place. It is also important that the network is intelligent to countermeasure bad actors. Because the integrity of optical channels in are also affected by component degradation, photon-matter interactions and other non-linear phenomena, the network should be able to differentiate between malicious interventions and parametric degradations. In this paper we identify observable performance parameters and predictors, we describe a estimating method for in-line parameter monitoring, we conclusively distinguish between component degradations and intervention of a malicious eavesdropper and we describe countermeasure mechanisms.
Network security concerns have recently been increased due to the vast amount of information that flows in a single fiber. At the application layer, data security relies on end-user encryption algorithms, many of which are known to be vulnerable, and authentication algorithms are not foolproof as the sophistication of eavesdroppers and unauthorized bad actors increases. As a result, the communications link may be attacked by eavesdroppers to access data, to mimic the source, or to cause service denial. To accomplish this however, the transmission link must be compromised. Therefore, if an a priori link and channel signature has been established at the receiver, then an unauthorized intervention is possible to be detected, reported and counteracted. In this paper we provide an analysis of the link and channel parameters that affect the signal performance, which also constitute the identification signature of the optical channel. When the medium is compromised, the channel parameters are affected and thus the channel performance. We also develop a model and we simulate conditions of channel attack
Security in optical communications has been recently a concern due primarily of the vast amount and the sensitivity of information that a single fiber carries. It is generally accepted that data security is encrypted by the end-user and that the optical network is not easy to tap as it was with wired networks. However, the sophistication of eavesdroppers has increased and if an optical link is accessed, then the encryption code of data can be broken with the use of supercomputers. In addition to data eavesdropping, eavesdroppers may access the link for malicious attacks, or for transmitting erroneous data by mimicking a source. Therefore, it is important that the receiver has the means and intelligence to recognize the signature of the source and the optical channel so that when the link is tapped, the receiver recognizes it and it alerts the network management or it triggers a data rerouting process. In fact, an optical channel, including source, fiber and optical components, has its own optical parameters that constitute a signature. These parameters are the result of linear and non-linear phenomena that affect the quality characteristics of the optical signal and which can not be mimicked. Therefore, the understanding of optical parameters that define the optical channel signature is very critical. In this paper we provide an analysis of the factors affecting the signal quality and thus they constitute the signature of the optical channel, we model the optical channel and demonstrate via simulations that small parametric variation affect the signature of the channel. As a result, monitoring the signal parameters leads to source and channel authentication whereas detecting the parametric variability of channel deducts channel degradation or tapping.
Network security has traditionally been limited to network access and network administration, whereas data security is left to end clients where text is encrypted and decrypted. In the last decade, there has been a rapid increase in bandwidth demand mainly due to the explosion of the Internet and mobile telephony. The explosive bandwidth has been comfortably met with optical networks having many optical channels multiplexed in the same fiber, known as wavelength division multiplexing,. Data rate exceeding 1 Tbps within a fiber implies that there are tributaries that carry sensitive and proprietary data. Although data are encrypted by the end client, there is no assurance that, if captured by an eavesdropper, they may not be decrypted. Therefore, three new requirements emerge; monitor the optical link integrity, detect if an optical channel is compromised by tapping the fiber, and adopt a countermeasure strategy. One way to accomplish this is to monitor the channel performance parameters for changes in real-time. In this paper, we analyze key performance parameters of the optical signal, we describe how these parameters impact the channel performance. In addition, we develop a method to estimate in real-time the bit error rate and signal to noise ratio, and how these can be used to detect fiber intrusion. Finally, we develop a countermeasure protocol that we believe outsmarts the eavesdropper.
The huge amount of traffic transportable by the next generation optical network is vulnerable to attacks, as is discerned from an alarmingly increase of incidents. The types of attack are expected to range from the typical eavesdropping and service denial to more sophisticated source mimicking. As a consequence, modern encrypted methods refuge to highly sophisticated methods that emanate from quantum mechanics, known as quantum cryptography. However, the sophistication and elegance of quantum-cryptography makes the assumption that the transmission medium and the components involved on the link are perfect and that the properties of photons and the signal intensity do not change during propagation over many kilometers. Therefore, a practical implementation of Q-C may exhibit its own vulnerabilities due to non-linear interactions between photons and medium. Therefore, in addition to the sophistication of QKD and encryption algorithms, an additional function is needed that detects malicious intervention on the transmission link as well as a countermeasure strategy that outsmarts the attacker. In this paper, we consider a practical optical signal that consists of multiple photons, we consider a pragmatic medium with nonlinearities, scattering and absorption centers. We describe a case of service denial with Q-C, a method by which an attack is detected, and we develop a countermeasure strategy outsmarting the attacker. Our method assumes that the data channel is encrypted using sophisticated algorithms.
Optical network transfers a huge aggregate traffic,and a good part of this traffic is sensitive and confidential,and thus attractive to malicious attackers in eavesdropping,source mimicking,or denial of service attack.Furthermore,any service interruption due to failures and severe degradations could cause network congestion and/or traffic loss.As a result,it is very important for optical network to deploy fast detection and traffic recovery.This paper principally analyzes optical-fiber wiretapping method and its detection,describes the new quantum wiretapping detection technology,and gives some remarks on the related new technologies.