Upload
adva-optical-networking
View
273
Download
0
Embed Size (px)
DESCRIPTION
Check out Stephan Neidlinger's slides tha
Citation preview
BEL 2 Spezial, Unterschleißheim, Germany
03.07.2014
Stephan Neidlinger
Security in Optical Networks – Useless or Necessary?
© 2014 ADVA Optical Networking. All rights reserved. Confidential.22
Broadband Access Network Market Trends
• Service data rates keep on increasing• NG video: 3D, UHDTV, on-line streaming services, …
• Several markets need to be addressed in order to decrease return of investment time in FTTH infrastructure projects (according to the FTTH business guide published by FTTH Council Europe)• Residential• Business• Carrier• Public sector
• These applications call for• Equal down/upstream bandwidth (e g business, carrier services)• Scalable architecture (e g user individual bandwidth upgrade)• Simple systems for low cost potential (especially for residential market)• Secure architecture (e g business services)
© 2014 ADVA Optical Networking. All rights reserved. Confidential.33
FTTH Business Guide
© 2014 ADVA Optical Networking. All rights reserved. Confidential.44
FTTH Business Guide
© 2014 ADVA Optical Networking. All rights reserved. Confidential.55
Example:Data Center Environment & Security
APPS APPS
© 2014 ADVA Optical Networking. All rights reserved. Confidential.66
Data Center Environment & SecurityPhysical Access to the Data Center
APPS APPS
© 2014 ADVA Optical Networking. All rights reserved. Confidential.77
Data Center Environment & SecurityHardware Security
APPS APPS
© 2014 ADVA Optical Networking. All rights reserved. Confidential.88
Data Center Environment & SecuritySoftware Security
APPS APPS
© 2014 ADVA Optical Networking. All rights reserved. Confidential.99
Data Center Environment & Security…and what about the Fiber Connection?
APPS APPS
© 2014 ADVA Optical Networking. All rights reserved. Confidential.1010
Fiber Optic NetworksTapping Possibilities
Y-Bridge for service activities
Fiber Coupling device
Street cabinet
How to get access?
Whereto get access?
Splice boxes / cassettes
(Outdoor / Inhouse)
There are multiple ways to access fiber
© 2014 ADVA Optical Networking. All rights reserved. Confidential.1111
Fiber Optic NetworksOptical Tapping Method
Cladding: 125 µm
Core: 9 µm
Lost Light
“For both public and private networks, optical taps and analytic devices are required and inexpensive maintenance equipment in common use worldwide today. Various types of optical taps […] are also used for corporate espionage…”
„Clearly, physical protection of optical transmission media and junction boxes
is essential; in addition, data encryption plays a role in protecting
sensitive data.” [5][5] Security Strategies Alert, M.E. Kabay, March 2003
© 2014 ADVA Optical Networking. All rights reserved. Confidential.1212
Fiber Optical Networks Security Options
Encryption
Security-Hardened Software
Physical Layer Monitoring
Power TrackingIntrusion DetectionOptical Time-Domain Reflectometer (OTDR)
RADIUSSecure ShellSNMPv3
AES-256AuthenticationDiffie-Hellman
Optical Networks Security Tools are necessary and available
122842636
© 2014 ADVA Optical Networking. All rights reserved. Confidential.1313
WAN
Ipsec / MacSec
Encryption
WDM-transport WDM-transport
Site BSite A
WAN
Appliance based
Encryption
WDM-transport
Site B
WDM-transport
Site A
Optical Transmission SecuritySpeed of Encryption
WAN
Router Site A Site B
xWDM basedEncryption
Sp
eed, th
roug
hpu
t and sim
plicity
TDM TDM
FC Switch
Router
FC Switch
Router
FC Switch
Router
FC Switch
Router
FC Switch
Router
FC Switch
Thank You
IMPORTANT NOTICE
The content of this presentation is strictly confidential. ADVA Optical Networking is the exclusive owner or licensee of the content, material, and information in this presentation. Any reproduction, publication or reprint, in whole or in part, is strictly prohibited.
The information in this presentation may not be accurate, complete or up to date, and is provided without warranties or representations of any kind, either express or implied. ADVA Optical Networking shall not be responsible for and disclaims any liability for any loss or damages, including without limitation, direct, indirect, incidental, consequential and special damages, alleged to have been caused by or in connection with using and/or relying on the information contained in this presentation.
Copyright © for the entire content of this presentation: ADVA Optical Networking.