Software-Defined Multi-domain Tactical Networks: Foundations and Future Directions

Mahmud, Redowan; Toosi, Adel Nadjaran; Rodríguez, María Alejandra; Madanapalli, Sharat Chandra; Sivaraman, Vijay; Sciacca, L.J.; Sioutis, Christos; Buyya, Rajkumar

doi:10.1007/978-3-030-69893-5_9

Cited by 3 publications

(3 citation statements)

References 127 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Another strategy for interoperability in tactical networks is Software-Defined Networking (SDN), which offers advanced management features [24]. This strategy is still a work in progress, with multiple research initiatives for overcoming challenges regarding heterogenous, multi-bearer networks with unpredictable service demand [2].…”

Section: A Related Workmentioning

confidence: 99%

“…Moreover, SDP is based on Software-Defined Networking (SDN), which offers advanced management features that can be used for interoperability [24], and for facilitating endto-end interactions and the processing of resources in tactical networks [2].…”

Section: An Sdp-based Federationmentioning

confidence: 99%

“…Devices in military architectures can be classified into different categories [2]. Resource-constrained devices have low computing power and battery, and can be deployed directly on the battlefield.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Interoperable Zero Trust Federated Architecture for Tactical Systems

Poirrier,

Cailleux,

Clausen

2023

MILCOM 2023 - 2023 IEEE Military Communications Conference (MILCOM)

View full text Add to dashboard Cite

In military and tactical missions, operational needs can require different domains and nations in a coalition to federate, to facilitate sharing of resource between domains. On the other hand, data and services need to be protected against unauthorized access. The zero trust paradigm provides principles for securing data and services, based on fine-grain compartmentalization of resources and least-privileged access policies. In zero trust architectures, every access to a resource is verified, without relying on implicit trust between the requester and the resource. However, state-of-the-art federation procedures weaken the zero trust security guarantees, as information on requesters, belonging to one domain, cannot be verified by another domain offering a resource. Therefore, access inherently relies on trust between domains, which contradicts zero trust principles.This paper presents a novel technique to create a zero trust federation, in which every access to a resource is explicitly verified, without trusting federation partners. In particular, due to the power constraints on devices composing tactical architectures, the presented solution does not require invasive software to be installed in requester devices.

show abstract

Section: A Related Workmentioning

confidence: 99%

Section: An Sdp-based Federationmentioning

confidence: 99%