On May 11-12, 2023, in Warsaw, at the headquarters of Exatel, a working meeting was held regarding the progress of the CRI-Net, Critical Network SDN Security System project - SDN network security system for critical infrastructure. The project was attended by representatives of the consortium members, i.e. Exatel, Gaz-System and the Rzeszów University of Technology - Department of Complex Systems represented by: M. Bolanowski, A. Paszkiewczi, D. Strzałka. During the meeting, there was a presentation of solutions prepared as part of stage I of the project: System analysis and assumptions for the final system, the purpose of which was to support the development of a set of functional and non-functional assumptions for the final solution developed in the project - a security system based on SDN for the OT network. Rzeszów University of Technology presented 4 products of the project, i.e. P1 State of the art review. P2 An analytical study prepared on the basis of the state of the art regarding the functional capabilities of the SDN infrastructure affecting the reliability and redundancy of the network structure. P3 List of assumptions regarding: possible topological structures for the SDN environment, methods of ensuring the redundancy of physical and logical connections taking into account the specificity of the SDN technology, the scope of technologies enabling the monitoring of network flows in order to potentially detect anomalies in the SDN architecture; determination of methods and means of locating measurement data acquisition points. P4 Review of Polish and international law, standards, policies and good practices in the field of telecommunications and cybersecurity.
These products include:
- Analysis of the functional capabilities of network mechanisms with high potential for use within the SDN infrastructure, affecting the reliability and redundancy of the network structure.
- List of Polish and international laws, standards, policies and good practices in the field of telecommunications and cybersecurity.
- Development of assumptions regarding:
- applicable topological structures, taking into account the nature of network traffic, QoS, system architecture and the possibility of actively responding to incidents in the SDN environment;
- methods and means of ensuring the redundancy of physical and logical connections, taking into account the specificity of SDN technology;
- the scope of technologies enabling ongoing monitoring of network flows towards their representation as time series in order to check the possibility of detecting anomalies in the SDN architecture;
- definitions of the methods and means of locating measurement data acquisition points, taking into account their impact on the efficiency of the system and the load on its individual elements.
- Development of a set of complementary topologies, as well as technologies, methods and means as well as network mechanisms that guarantee redundancy, reliability and acquisition of measurement data intended for use in the SDN infrastructure.
Assumptions for the implementation of stage II, including the analysis of cybersecurity assumptions and the development of the final system, were also prepared in order to carry out analytical and laboratory tests to confirm the effectiveness and functionality of selected network mechanisms and topological structures from the point of view of their use in SDN networks to manage a distributed environment of network devices, taking into account security, redundancy and reliability aspects.
On behalf of the Complex Systems Department, the following people are involved in the project:
- Dominik Strzałka,
- Marek Bolanowski,
- Andrzej Paszkiewicz,
- Mirosław Mazurek,
- Paweł Dymora,
- Bartosz Kowal,
- Paweł Kuraś,
- Michał Ćmil,
- Magdalena Rogóż.
