Security, Cloud. Guy Pujolle

Transcription

1 Post-IP Network Knowledge, Piloting, Virtualization, Security, Cloud Guy Pujolle

2 Where we are? Stone age Bronze age Iron age 2.5 M années 8000 années 3000 années Printing Stone age Bronze age Iron age Internet Stone age Bronze age Iron age

3 Portable Network evolution Internet t Protocol 3

4 Why a new generation? Cloud Security Control Management Energy Mobility We could have two networks: -The current Internet (with some improvements) - An Internet adapted to the cloud

5 What to do? Starting from scratch or improving current IP technology Build a secure basis Virtualize all physical and software resources Implement a network collective intelligence Use massively wireless environments

6 Security Build a highly secure network Use secure microcontrollers (smartcard) SSL/TLS in the secure microcontroller Secure identity management to access the web Privacy using secure modules in authentication y g servers

7 Virtualization Virtualize all resources Virtual node Virtual antenna Virtual server Virtual machine Virtual storage...

8 Collective network intelligence Build an intelligent network to optimize management and control schemes Use a distributed intelligent agent platform Knowledge plane Piloting plane

9 Mobility Wireless access Throughput is increasing by a factor of 1000 between 2010 and 2020 Multihoming 4G and/or Wi-Fi NG (IEEE ac and af) Virtual Antenna + Virtual systems Cognitive radio

10 Architecture

11 Cloud

12 Cloud

13 A Seven-plane Architecture Cloud plane Security and identity plane Knowledge plane Piloting plane Management and control plane Virtualisation plane Data plane

14 Security

15 The KEY for accessing the network

16 Solution Open tech. Certifs. Open SSL Sessions

17 SSO solution for web access Certificate check 1 Create Open ID account Security Provider 2 Re-routing to security 3 Check provider service access rights 1 Access request to WEB service 4 Set up secured connection Operator Internet WEB Service SSO Single Sign-on

18 End of phishing schemes No login, no password Spywares and Trojans inefficient Secure protocol are in the smartcard or secure element Working for all OS and all terminals

19 Virtualization

20 Network virtualization Application Application Application Hypervisor Mgmt NOS NOS NOS Hypervisor Network equipment hardware

21 Virtual networks A protocol adapted to each flow Physical Machine Virtual Machine

22 Live migration

23 Network on the fly

24 Urbanization

25 CPU Memory I/O cards Access Point Virtual LSR Virtual PBX Virtual Firewall Virtual Server Virtual SIP server Virtual Router Home Gateway Virtual Access Point Virtual HG Virtual HG Telecom energy (SmartGRID)

26 Virtual Router LSR Virtual access point Infrastructure control server

27 Infrastructure Control Server Network Equipment supporting virtualization 27

28 Knowledge plane Piloting plane

29 Autonomic plane IP architecture Mana ageme ent plane Control plane Data plane Autonomic plane Post-IP architecture Control & management plane Data plane

30 Autonomic plane Knowledge plane Autonomic plane Piloting plane Control & management plane

31 Knowledge and piloting plane Agent Agent NE NE Agent NE Agent NE Agent NE Agent NE Agent NE Agent NE

32 Knowledge and piloting plane Dynamic planner Policy base Behaviors Situated view Effector Sensor Network element Behavior are expert autonomic components in charge of monitoring, decision and control. Dynamic Planner orchestrates all the activities of the Agent.

33 Knowledge and piloting plane A Agent on Node A Situated View Global View

34 Post-IP network Virtual router LSR Gateway Firewall PBX Voice Firewall Server Access Point Directory Virtual HNB

35 Questions