Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Quantum Communications, Networking, and Computing (QCNC)

Secure Network Innovation in Defense: SDN and Quantum Cryptography with DISCRETION

Juan P. Brito, Jesús Ballesta, Rubén B. Méndez, Luis Mengual, Laura Ortíz, Vicente Martín, Rafael Cantó, Alejandro Muñiz, Antonio Pastor, Diego R. Lopez, Stephan Laschet, Sebastian Ramacher, Pietro Piscione, Ahmed K Abdulwahed, Pietro G. Giardina, Miguel Borges de Freitas, Rui Calé, Luis Maia, Luís Magalhães, Gustavo Anjos, Ricardo Chaves, Joana Afonso, Pedro G. Martins, Tiago M. Dias, Francisco Pinto, Margarida Vieira, Rodrigo Bacar, Catarina Bastos

Published Mar 31, 2025• 1 citation
Publisher

Abstract

In military contexts, information and communication services are critical, relying on secure and robust infrastructures. However, current network architectures in defense are often static and inflexible. Software-Defined Networking offers significant advantages in terms of flexibility, agility, net-work management, and operational costs. These properties are essential in dynamic environments, and SDN technology can further enhance these benefits by incorporating Software-Defined Radio technologies, which are highly used in defense environments. Additionally, SDN networks can ensure redundancy and resilience against failures. The adoption of SDN facilitates the flexible integration of Quantum Key Distribution networks, which provide an inherently secure method for cryptographic key distribution across network nodes. However, current QKD implementations face limitations in scope and flexibility, as they are generally based on fixed, point-to-point connections and static infrastructure. Together, SDN and QKD present synergistic benefits: SDN enables a flexible QKD network with enhanced control and monitoring capabilities, while QKD ensures secure communication even against quantum threats within the SDN architecture. The DISCRETION project develops an SDN solution integrating QKD capabilities for secure communications, enhancing European defense capabilities through these advanced technologies. Cipher Machines within DISCRETION assure the red-black network segregation, an essential feature in military networks. This is provided by enabling real-time encryption and decryption using keys supplied by the SDN-QKD layer, alongside pre-shared keys. For mobility and tactical scenarios, SDR solutions are evaluated and incorporated into the SDN solution to support radio network segments and ensure secure communications in mobile contexts. The proposed DISCRETION solution was deployed at the REPMUS 2024 defense event, yielding notable results.

DOI
10.1109/qcnc64685.2025.00049

Related papers

DISCRETION: First Field Demonstration of a Quantum Enabled SDN in the Context of a Military Exercise

Catarina Bastos, Francisco Pinto, Rodrigo Bacar +31 more

The DISCRETION project aims at the development of a prototype of a Quantum Key Distribution (QKD) integrating a Software Defined Network (SDN) solution providing quantum-safe secure communications capabilities, in a way that European Defence can benefit from the flexibility, security, and resilience that these technologies bring to the communication networks. DISCRETION integrates these disruptive technologies within a red-black network separation principle, in compliance with the doctrine of military network segregation. The encryption and protection of all data between red and black networks is realized through dedicated hardware hardened Cipher Machines (CM) using the keys obtained from QKD systems integrated by the SDN and a Key Management System (KMS). Both SDN and KMS were developed in DISCRETION in compliance with the ETSI GS QKD015 and QKD004 standards. We explore the Continuous-Variables (CV) QKD technology, which is currently regarded as one of the main building blocks for large-scale deployment of quantum cryptography, since it facilitates coexistence with traditional optical networks, using classical photonics platforms. In this work, we present a field live demonstration of the DISCRETION project in the context of the Robotic Experimentation and Prototyping using Maritime Uncrewed Systems (REPMUS 24) organized annually by the Portuguese Navy and NATO. We also show how Software Defined Radios (SDR) can be securely connected to the DISCRETION's system from various locations to get a set of keys generated and distributed by a CV-QKD Network and use them for encrypted communications in a mission. Finally, we show how we can use the quantum generated keys to feed CM to protect red side messages sent through unsafe black network connections.

International Conference on Military Communications and Information Systems (ICMCIS)•May 13, 2025•1 citation

Quantum resistant software Defined-Networking IPsec, enabling ITS communication over IP networks on real telco infrastructures

Rubén B. Méndez, Jaime S. Buruaga, Juan Pedro Brito Méndez +3 more

The growing dependence on digital communications underscores the need to protect data as it travels through the network. Internet Protocol Security (IPsec) plays a central role, providing a robust framework to ensure the confidentiality, integrity, and authenticity of transmitted data. However, advances in Quantum Computing pose a significant threat to current public-key cryptographic schemes by enabling efficient solutions to factoring and discrete logarithm problems. A promising solution also arises from the quantum domain. Quantum Key Distribution (QKD) provides a security layer immune to any computational attacks, whether quantum or classical. While the rapid adoption of quantum-safe technologies is highly desirable, it is equally important to ensure the resilience of existing trusted infrastructures, as the introduction of novel technologies may also entail unforeseen challenges. Enabling an evolutionary path that brings our current security infrastructure to a quantum-safe one, protected against both present and future threats, is thus very important. This work proposes a solution that integrates emerging quantum technologies into the existing security and communications infrastructure to ensure long-term protection. We focus on IPsec —one of the most widely deployed security protocols— and combine it with Software-Defined Networking (SDN) and QKD to construct a novel network security infrastructure that is resilient against both classical and quantum computational threats. Building upon recent standardization initiatives and operational tools for QKD integration, we demonstrate advanced capabilities -including rekeying and secure key transport- on a field deployed QKD network operating within a shared quantum-classical production infrastructure.

Computer Networks•Mar 4, 2026•2 citations

Enhancement of SDN Packet Security Using Quantum Keys

K Shyampradeep, Amith R Telgar, K Saraswathi

Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.

International Conference on Intelligent Data Communication Technologies and Internet of Things (IDCIoT)•Feb 5, 2025•1 citation

Enabling Quantum Key Distribution Networks via Software-Defined Networking

Alejandro Aguado, Vı́ctor López, Juan P. Brito +3 more

Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.

International Conference on Optical Network Design and Modeling (ONDM)•May 1, 2020•32 citations

Increasing network reliability by securing SDN communication with QKD

Paolo Comi, Paolo Martelli, Vicente Martín +6 more

Modern communication networks can be flexibly shaped and controlled using Software Defined Networking (SDN) paradigm. However, besides unprecedented functional benefits, this solution exploits an architectural single point of failure. Securing the communication among SDN functional element is therefore a critical requirement for improving the network reliability. A novel approach to secure communications is provided by Quantum Key Distribution (QKD) that is a physical layer technology capable to securely deliver symmetric encryption keys leveraging on quantum physic properties. Our research demonstrates how to provide unconditionally secure communication at SDN level dramatically improving the reliability of the communication network itself.

International Conference on the Design of Reliable Communication Networks (DRCN)•Apr 19, 2021•5 citations

Securing SDN Communication through Quantum Key Distribution

Marian Hanashiro Rempola, Andrew D. Smith, Yan Li +1 more

Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.

IEEE Transportation Electrification Conference and Expo•Jun 19, 2024•7 citations
In military contexts, information and communication services are critical, relying on secure and robust infrastructures. However, current network architectures in defense are often static and inflexible. Software-Defined Networking offers significant advantages in terms of flexibility, agility, net-work management, and operational costs. These properties are essential in dynamic environments, and SDN technology can further enhance these benefits by incorporating Software-Defined Radio technologies, which are highly used in defense environments. Additionally, SDN networks can ensure redundancy and resilience against failures. The adoption of SDN facilitates the flexible integration of Quantum Key Distribution networks, which provide an inherently secure method for cryptographic key distribution across network nodes. However, current QKD implementations face limitations in scope and flexibility, as they are generally based on fixed, point-to-point connections and static infrastructure. Together, SDN and QKD present synergistic benefits: SDN enables a flexible QKD network with enhanced control and monitoring capabilities, while QKD ensures secure communication even against quantum threats within the SDN architecture. The DISCRETION project develops an SDN solution integrating QKD capabilities for secure communications, enhancing European defense capabilities through these advanced technologies. Cipher Machines within DISCRETION assure the red-black network segregation, an essential feature in military networks. This is provided by enabling real-time encryption and decryption using keys supplied by the SDN-QKD layer, alongside pre-shared keys. For mobility and tactical scenarios, SDR solutions are evaluated and incorporated into the SDN solution to support radio network segments and ensure secure communications in mobile contexts. The proposed DISCRETION solution was deployed at the REPMUS 2024 defense event, yielding notable results.
The DISCRETION project aims at the development of a prototype of a Quantum Key Distribution (QKD) integrating a Software Defined Network (SDN) solution providing quantum-safe secure communications capabilities, in a way that European Defence can benefit from the flexibility, security, and resilience that these technologies bring to the communication networks. DISCRETION integrates these disruptive technologies within a red-black network separation principle, in compliance with the doctrine of military network segregation. The encryption and protection of all data between red and black networks is realized through dedicated hardware hardened Cipher Machines (CM) using the keys obtained from QKD systems integrated by the SDN and a Key Management System (KMS). Both SDN and KMS were developed in DISCRETION in compliance with the ETSI GS QKD015 and QKD004 standards. We explore the Continuous-Variables (CV) QKD technology, which is currently regarded as one of the main building blocks for large-scale deployment of quantum cryptography, since it facilitates coexistence with traditional optical networks, using classical photonics platforms. In this work, we present a field live demonstration of the DISCRETION project in the context of the Robotic Experimentation and Prototyping using Maritime Uncrewed Systems (REPMUS 24) organized annually by the Portuguese Navy and NATO. We also show how Software Defined Radios (SDR) can be securely connected to the DISCRETION's system from various locations to get a set of keys generated and distributed by a CV-QKD Network and use them for encrypted communications in a mission. Finally, we show how we can use the quantum generated keys to feed CM to protect red side messages sent through unsafe black network connections.
The growing dependence on digital communications underscores the need to protect data as it travels through the network. Internet Protocol Security (IPsec) plays a central role, providing a robust framework to ensure the confidentiality, integrity, and authenticity of transmitted data. However, advances in Quantum Computing pose a significant threat to current public-key cryptographic schemes by enabling efficient solutions to factoring and discrete logarithm problems. A promising solution also arises from the quantum domain. Quantum Key Distribution (QKD) provides a security layer immune to any computational attacks, whether quantum or classical. While the rapid adoption of quantum-safe technologies is highly desirable, it is equally important to ensure the resilience of existing trusted infrastructures, as the introduction of novel technologies may also entail unforeseen challenges. Enabling an evolutionary path that brings our current security infrastructure to a quantum-safe one, protected against both present and future threats, is thus very important. This work proposes a solution that integrates emerging quantum technologies into the existing security and communications infrastructure to ensure long-term protection. We focus on IPsec —one of the most widely deployed security protocols— and combine it with Software-Defined Networking (SDN) and QKD to construct a novel network security infrastructure that is resilient against both classical and quantum computational threats. Building upon recent standardization initiatives and operational tools for QKD integration, we demonstrate advanced capabilities -including rekeying and secure key transport- on a field deployed QKD network operating within a shared quantum-classical production infrastructure.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.
Modern communication networks can be flexibly shaped and controlled using Software Defined Networking (SDN) paradigm. However, besides unprecedented functional benefits, this solution exploits an architectural single point of failure. Securing the communication among SDN functional element is therefore a critical requirement for improving the network reliability. A novel approach to secure communications is provided by Quantum Key Distribution (QKD) that is a physical layer technology capable to securely deliver symmetric encryption keys leveraging on quantum physic properties. Our research demonstrates how to provide unconditionally secure communication at SDN level dramatically improving the reliability of the communication network itself.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.