All-Optical Header Processing in a 42.6 Gb/s Optoelectronic Firewall

A novel architecture to enable future network security systems to provide effective protection in the context of continued traffic growth and the need to minimize energy consumption is proposed. It makes use of an all-optical prefiltering stage operating at the line rate under software control to distribute incoming packets to specialized electronic processors. An experimental system that integrates software controls and electronic interfaces with an all-optical pattern recognition system has demonstrated the key functions required by the new architecture. As an example, the ability to sort packets arriving in a 42.6 Gb/s data stream according to their service type was shown experimentally.

[1]  Evangelos P. Markatos,et al.  An active splitter architecture for intrusion detection and prevention , 2006, IEEE Transactions on Dependable and Secure Computing.

[2]  D. Cotter,et al.  Faster Switching with Semiconductor Optical Amplifiers , 2007, 2007 Photonics in Switching.

[3]  E.P. Markatos,et al.  WSIM: A Software Platform to Simulate All-Optical Security Operations , 2008, 2008 European Conference on Computer Network Defense.

[4]  Alistair James Poustie,et al.  40 Gbit/s all-optical XOR gate based on hybrid-integrated Mach-Zehnder interferometer , 2003 .

[5]  D. Cotter,et al.  All-Optical Binary Pattern Recognition at 42 Gb/s , 2009, Journal of Lightwave Technology.

[6]  Nikos Pleros,et al.  Optical Signal Processing: Towards Packet Switching , 2004 .

[7]  Qi Jie Wang,et al.  All-optical logic XOR using differential scheme and Mach-Zehnder interferometer , 2002 .

[8]  J. Marti,et al.  IST-LASAGNE: towards all-optical label swapping employing optical logic gates and optical flip-flops , 2005, Journal of Lightwave Technology.

[9]  Robert W. Tkach.  Network traffic and system capacity: Scaling for the future , 2010, 36th European Conference and Exhibition on Optical Communication.

[10]  Alistair Poustie.  Highly integrated InP-based subsystems for all-optical processing , 2010, 2010 Conference on Optical Fiber Communication (OFC/NFOEC), collocated National Fiber Optic Engineers Conference.

[11]  Alistair James Poustie,et al.  42.6 Gbit/s fully integrated all-optical XOR gate , 2009 .

[12]  Dionisios N. Pnevmatikatos,et al.  On the Importance of Header Classification in HW/SW Network Intrusion Detection Systems , 2005, Panhellenic Conference on Informatics.

[13]  Eduward Tangdiongga,et al.  160 Gbit/s wavelength conversion using ultra-fast dynamics in SOA , 2005 .

[14]  Daniel J. Blumenthal,et al.  Tutorial on “optical signal processing: The roadmap towards high-speed optical racket/burst switching” ECOC 2009, Vienna Austria , 2009, 2009 35th European Conference on Optical Communication.

[15]  Evangelos P. Markatos,et al.  Improving the Performance of Passive Network Monitoring Applications using Locality Buffering , 2007, 2007 15th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems.

[16]  Graeme Maxwell,et al.  WISDOM: security-aware fibres , 2009, EUROSEC '09.

[17]  Shigeru Nakamura,et al.  Nonlinear phase shifts induced by semiconductor optical amplifiers with control pulses at repetition frequencies in the 40–160-GHz range for use in ultrahigh-speed all-optical signal processing , 2002 .

[18]  P. Zakynthinos,et al.  Enabling Tb/s Photonic Routing: Development of Advanced Hybrid Integrated Photonic Devices to Realize High-Speed, All-Optical Packet Switching , 2008, IEEE Journal of Selected Topics in Quantum Electronics.