Network isolation is a critical modern Internet service. To date, network operators have created a logical network of distributed systems to provide communication isolation between different parties. However, the current network isolation is limited in scalability and flexibility. It limits the number of virtual networks and it only supports isolation at host (or virtualmachine) granularity. In this paper, we introduce Scalable Virtual Local Area Networking (SVLAN) that scales to a large number of distributed systems and offers improved flexibility in providing secure network isolation. With the notion of destination-driven reachability and packet-carrying forwarding state, SVLAN not only offers communication isolation but isolation can be specified at different granularities, e.g., per-application or per-process. Our proof-of-concept SVLAN implementation demonstrates its feasibility and practicality for real-world applications.
For over two decades, hierarchical zoning models have dominated operational technology (OT) network design. However, ongoing changes to industrial network technologies and workloads, together with rising threat levels, are now challenging this design pattern. To address these issues, this paper introduces Tableau, a new zoning architecture for OT networks. Tableau increases network flexibility by flattening the zone structure and by allowing the seamless integration of plant, edge, corporate, and cloud networks. Simultaneously, Tableau facilitates modern security practices and is IEC 62443 compatible, ensuring the continued secure operation of OT infrastructure.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.