An Integrated Authorization and Intrusion Detection Systems for GMPLS Control Plane

79369B Networking and security technology have grown inextricably linked as enterprises rely on computer networks for everyday operations. It is imperative to integrate several types of security technologies into the network to foil various kinds of attacks before they can do any damage. Generalized Multiple Protocol Label Switching (GMPLS) is used to provide the control plane for devices that can switch packet, time, wavelength, and fiber domains. This common control plane simplifies network operation and management, but increases the risk of service disruption because the GMPLS control plane has not been secured. Signaling consists of many signals and the sequence and data parameters in the packets becomes significant for deriving the semantics of the signal, which can be misused to give out false information. Consequently, this project will develop an Integrated Authorization and Intrusion Detection System (IDS) that discriminates between correct and incorrect signals, based on validating the context, content, and history of signaling messages. Phase I will: (1) design the header - a precise definition of content, context and history that need to be kept in order for the authentication, authorization and the IDS system to work; (2) design the appropriate algorithms; and (3) simulate algorithms on a testbed based on a distributed simulation technique that is scalable as well modular and uses an distributed agent based architecture. Commercial Applications and Other Benefits as described by the awardee: An Integrated Intrusion Detection System should be utilized as a security mechanism in the DOE GMPLS-based high performance network to protect the control plane based GMPLS signaling protocol. In addition, the system should lead to a unique security product for other network technologies as well, for example in the DoD's net centric network infrastructure. Also, a modular system could be developed for public carriers to protect their converged network infrastructure and provide end system security in the enterprise environment.