高速光子防火墙关键技术综述

黄善国; 李新; 唐颖; 郭俊峰

doi:10.11959/j.issn.1000-436x.2019212

您当前的位置：

首页 >

文章列表页 >

高速光子防火墙关键技术综述

杰青优青专栏 | 更新时间：2024-06-05

- 高速光子防火墙关键技术综述
- Overview of the key technology of photonic firewall at high speed
- 通信学报 2019年40卷第9期页码：157-167
- 作者机构：
  
  北京邮电大学信息光子学与光通信研究院，北京 100876
- 作者简介：
  
  [ "黄善国（1978- ），男，山东淄博人，博士，北京邮电大学教授、博士生导师，主要研究方向为多维光交换与光网络理论与技术，包括智能光交换与数据光网络、光网络规划与优化技术、高频光载无线系统等。" ]
  [ "李新（1986- ），男，山东枣庄人，博士，北京邮电大学讲师、硕士生导师，主要研究方向为数据中心光网络、光网络生存性、光网络安全、软件定义的光网络（SDON）等。" ]
  [ "唐颖（1993- ），女，广西梧州人，北京邮电大学博士生，主要研究方向为数据中心光网络、光网络安全与光网络虚拟化等。" ]
  [ "郭俊峰（1995- ），男，浙江杭州人，北京邮电大学硕士生，主要研究方向为光网络安全、光子防火墙等。" ]
- 基金信息：
  
  国防科技创新特区基金资助项目(18-163-21-TS-001-018-01);国家自然科学基金资助项目(61701039);中央高校基本科研业务费专项资金资助项目(2018RC23);国家杰出青年科学基金资助项目(61622102)
- DOI：10.11959/j.issn.1000-436x.2019212
  中图分类号： TN929
- 网络出版日期：2019-09，
  
  纸质出版日期：2019-09-25
- 稿件说明：
移动端阅览
黄善国, 李新, 唐颖, 等. 高速光子防火墙关键技术综述[J]. 通信学报, 2019,40(9):157-167.

Shanguo HUANG, Xin LI, Ying TANG, et al. Overview of the key technology of photonic firewall at high speed[J]. Journal on communications, 2019, 40(9): 157-167.
黄善国, 李新, 唐颖, 等. 高速光子防火墙关键技术综述[J]. 通信学报, 2019,40(9):157-167. DOI： 10.11959/j.issn.1000-436x.2019212.

Shanguo HUANG, Xin LI, Ying TANG, et al. Overview of the key technology of photonic firewall at high speed[J]. Journal on communications, 2019, 40(9): 157-167. DOI： 10.11959/j.issn.1000-436x.2019212.

摘要

为了维护光网络安全，亟需研究部署能够有效处理高速光信号的光子防火墙，以替代现有的高能耗的电子防火墙。在介绍光子防火墙原理的基础上，基于相关运算和逻辑门2种主要实现方式综述了模式匹配技术，对比了各匹配系统的优劣，并总结了全光逻辑门的实现方法。最后，展望了全光模式匹配研究的下一步方向与发展趋势，即更高效的系统结构和响应速度更快的非线性器件。分析表明，基于全光模式匹配的光子防火墙在网络安全中具有良好的应用前景。

Abstract

In order to maintain the security of optical network

it is urgent to research and deploy photonic firewall which can effectively process high-speed optical signals to replace existing electronic firewall which consumes high energy.After a brief review of the principle of photonic firewall

the pattern matching technology based on correlation operation and all-optical logic gates were summarized

and the matching systems was compared according to their advantages and disadvantages.Besides

the realization methods of all-optical logic gates were introduced.Finally

the next research direction and development trend of all-optical pattern matching were prospected:more efficient system structure or non-linear devices with faster response speed.The survey shows that photonic firewall based on all-optical pattern matching has a good application prospect in network security.

关键词

Keywords

references

顾婉仪 . 光纤通信:第2版 [M ] . 北京 : 人民邮电出版社 , 2011 .

GU W Y . Optical fiber communications [M ] . 2nd ed . Beijing : Posts ＆Telecom PressPress , 2011 .

KRISHNAN S , BORUDE A . Security issues in all-optical networks [C ] // 2011 Annual SRII Global Conference . IEEE , 2011 : 790 - 794 .

SHANEMAN K , GRAY S . Optical network security:technical analysis of fiber tapping mechanisms and methods for detection ＆ prevention [C ] // Military Communications Conference (MILCOM) . IEEE , 2004 ( 2 ): 711 - 716 .

潘青 , 解东宏 , 程晓江 , 等 . 一种基于信号延迟的光网络攻击方式 [J ] . 电子设计工程 , 2012 , 20 ( 4 ): 125 - 129 .

PAN Q , XIE D H , CHENG X J , et al . An optical network attack approach based on signal delay [J ] . Electronic Design Engineering , 2012 , 20 ( 4 ): 125 - 129 .

罗青松 , 阳华 , 刘志强 , 等 . 光网络安全现状及关键技术研究 [J ] . 中国电子科学研究院学报 , 2013 , 8 ( 4 ): 338 - 343 .

LUO Q S , YANG H , LIU Z Q , et al . Security status and key technologies study of optical network [J ] . Journal of CAEIT , 2013 , 8 ( 4 ): 338 - 343 .

COBB S , . Establishing firewall policy [C ] // Southcon/96 Conference Record . IEEE , 1996 : 198 - 205 .

KRIT S , HAIMOUD E . Overview of firewalls:types and policies:managing windows embedded firewall programmatically [C ] // 2017 International Conference on Engineering ＆ MIS . IEEE , 2017 : 1 - 7 .

WU C , YANG X L , WENG Q W , et al . Simulation on high-speed all-optical pattern recognition using SOA-MZIs [C ] // 17th Opto- Electronics and Communications Conference . IEEE , 2012 : 821 - 822 .

SLITI M , HAMDI M , BOUDRIGA N . A novel optical firewall architecture for burst switched networks [C ] // 12th International Conference on Transparent Optical Networks . IEEE , 2010 : 1 - 5 .

WEBB R P , DAILEY J M , MANNING R J , et al . All-optical header processing in a 42.6 Gb/s optoelectronic firewall [J ] . IEEE Journal of Selected Topics in Quantum Electronics , 2012 , 18 ( 2 ): 757 - 764 .

KITAYAMA K , WADA N , SOTOBAYASHI H . Architectural considerations for photonic IP router based upon optical code correlation [J ] . Journal of Lightwave Technology , 2000 , 18 ( 12 ): 1834 - 844 .

HAUER M C , MCGEEHAN J E , KUMAR S . Optically assisted Internet routing using arrays of novel dynamically reconfigurable FBG-based correlators [J ] . Journal of Lightwave Technology , 2003 , 21 ( 1 ): 2765 - 2778 .

CHITGARHA M R , KHALEGHI S , YILMAZ O F , et al . Coherent correlator and equalizer using a reconfigurable all-optical tapped delay line [J ] . Optics Letters , 2013 , 38 ( 13 ): 2271 - 2273 .

ZIYADI M , CHITGARHA M R , KHALEGHI S , et al . Tunable optical correlator using an optical frequency comb and a nonlinear multiplexer [J ] . Optics Express , 2014 , 22 ( 1 ): 1 - 6 .

WILLNER A N , LIAO P C , ZOU K H , et al . Scalable and reconfigurable optical tapped-delay-line for multichannel equalization and correlation using nonlinear wave mixing and a Kerr frequency comb [J ] . Optics Letters , 2018 , 43 ( 22 ): 5563 - 5566 .

MOKHTAR M R , IBSEN M , TEH P C , et al . Reconfigurable multilevel phase-shift keying encoder-decoder for all-optical networks [J ] . IEEE Photonics Technology Letters , 2003 , 15 ( 3 ): 431 - 433 .

WIDJAJA J , WADA N , ISHII Y , et al . Photonic packet address processor using holographic correlator [J ] . Electronics Letters , 2001 , 37 ( 11 ): 703 - 704 .

KANG I , RASRAS M , DINU M , et al . All-optical byte recognition for 40 Gbit/s phase-shift-keyed transmission using a planar-lightwavecircuit passive correlator [J ] . IEEE Photonics Technology Letters , 2008 , 20 ( 12 ): 1024 - 1026 .

SAIDA T , OKAMOTO K , UCHIYAMA K , et al . Integrated optical digital-to-analogue converter and its application to pulse pattern recognition [J ] . Electronics Letters , 2001 , 37 ( 20 ): 1237 - 1238 .

COTTER D , COTTER S C . Algorithm for binary word recognition suited to ultrafast nonlinear optics [J ] . Electronics Letters , 1993 , 29 ( 11 ): 945 - 947 .

COTTER D , LUCEK J K , SHABEER M , et al . Self-routing of 100 Gbit/s packets using 6 bit 'keyword' address recognition [J ] . Electronics Letters , 1995 , 31 ( 25 ): 2201 - 2202 .

HALL K L , RAUSCHENBACH K A . All-optical bit pattern generation and matching [J ] . Electronics Letters , 1996 , 32 ( 13 ): 1214 - 1215 .

HAMILTON S A , ROBINSON B S . 40-Gb/s all-optical packet synchronization and address comparison for OTDM networks [J ] . IEEE Photonics Technology Letters , 2002 , 14 ( 2 ): 209 - 211 .

CHEN H , ZHU G , WANG Q , et al . All-optical logic XOR using differential scheme and Mach-Zehnder interferometer [J ] . Electronics Letters , 2002 , 38 ( 21 ): 1271 - 1273 .

RAMOS F , KEHAYAS E , MARTINEZ J M , et al . IST-LASAGNE:towards all-optical label swapping employing optical logic gates and optical flip-flops [J ] . Journal of Lightwave Technology , 2005 , 23 ( 10 ): 2993 - 3011 .

WEBB R P , YANG X L , MANNING R J , et al . All-optical binary pattern recognition at 42 Gb/s [J ] . Journal of Lightwave Technology , 2009 , 27 ( 13 ): 2240 - 2245 .

YANG X L , WEBB R P , MANNING R J , et al . Application of semiconductor optical amplifier logic gates in high-speed all-optical pattern recognition [C ] // 10th Anniversary International Conference on Transparent Optical Networks . IEEE , 2008 : 148 - 151 .

YANG X L , WEBB R P , MANNING R J , et al . Demonstration of all-optical pattern recognition at 42Gbit/s [C ] // European Conference on Optical Communication . IEEE , 2008 : 1 - 4 .

WEBB R P , YANG X L , MANNING R J , et al . 42Gbit/s all-optical pattern recognition system [C ] // 2008 Conference on Optical Fiber Communication/national Fiber Optic Engineers Conference . IEEE , 2008 : 1 - 3 .

KAKARLA R , VENKITESH D . Demonstration of optical header recognition for BPSK data using novel design of logic gates [J ] . Optics Communications , 2016 ( 363 ): 117 - 122 .

DAGENAIS M , SAINI S , TOUDEH-FALLAH F , et al . All-optical header recognition using a semiconductor optical amplifier switch matrix [C ] // 2007 Photonics in Switching . IEEE , 2007 : 65 - 66 .

MUKHERJEE K , KUMBHAKAR D . Simulation of two photon absorption in silicon wire waveguide for implementation of all optical logic gates [J ] . Optical and Quantum Electronics , 2012 , 123 ( 6 ): 489 - 493 .

WANG J , SUN J , SUN Q . Proposal for all-optical switchableOR/XOR logic gates using sum-frequency generation [J ] . IEEE Photonics Technology Letters , 2007 , 19 ( 8 ): 541 - 543 .

BOGONI A , WU X , BAKHTIARI Z , et al . 640 Gbits/s photonic logic gates [J ] . Optics Letters , 2010 , 35 ( 23 ): 3955 - 3957 .

吴岑 . 基于半导体光放大器的全光高速二进制数据序列的识别 [D ] . 上海:上海交通大学 , 2013 .

WU C . High-speed all-optical binary data pattern recognition based on semiconductor optical amplifier [D ] . Shanghai:Shanghai Jiao Tong University , 2013 .

SHEHATA M I , MOHAMMED N A . Design and optimization of novel two inputs optical logic gates (NOT,AND,OR and NOR) based on single commercial TW-SOA operating at 40Gbit/s [J ] . Optical and Quantum Electronics , 2016 , 48 ( 6 ): 1 - 16 .

FJEIDE T , WOLFSON D , KLOCH A , et al . Demonstration of 20 Gbit/s all-optical logic XOR in integrated SOA based interferometric wavelength converter [J ] . Electronics Letters , 2000 , 36 ( 22 ): 1863 - 1864 .

HOUBAVLIS T , ZOIROS K , VLACHOS K , et al . All-optical XOR in a semiconductor optical amplifier-assisted fiber Sagnac gate [J ] . IEEE Photonics Technology Letters , 1999 , 11 ( 3 ): 334 - 336 .

ZORIOS K E , PAPADOPOULOS G , HOUBAVLIS T , et al . Theoretical analysis and performance investigation of ultrafast all-optical boolean XOR gate with semiconductor optical amplifier-assisted Sagnac interferometer [J ] . Optics Communications , 2006 , 258 ( 2 ): 114 - 134 .

CHATTOPADHYAY T , ROY J N . Semiconductor optical amplifier (SOA)-assisted Sagnac switch for designing of all-optical tri-state logic gates [J ] . Optik - International Journal for Light and Electron Optics , 2011 , 122 ( 12 ): 1073 - 1078 .

BINTJAS C , KALYVAS M , THEOPHILOPOULOS G , et al . 20 Gb/s all-optical XOR with UNI gate [J ] . IEEE Photonics Technology Letters , 2000 , 12 ( 7 ): 834 - 836 .

SIARKOS T , ZOIROS K E , NASTOU D . On the feasibility of full pattern-operated all-optical XOR gate with single semiconductor optical amplifier-based ultrafast nonlinear interferometer [J ] . Optics Communications , 2009 , 282 ( 14 ): 2729 - 2740 .

ZORIOS K E , SIARKOS T . Design rules for full pattern-operated all-optical XOR gate with single semiconductor optical amplifier-based ultrafast nonlinear interferometer [C ] // 2010 7th International Symposium on Communication Systems,Networks ＆ Digital Signal Processing . IEEE , 2010 : 631 - 635 .

WANG Q , ZHU G , CHEN H , et al . Study of all-optical XOR using Mach-Zehnder Interferometer and differential scheme [J ] . IEEE Journal of Quantum Electronics , 2004 , 40 ( 6 ): 703 - 710 .

EL-SAEED E M , EL-AZIZ A A , FAYED H A , et al . Optical logic gates based on semiconductor optical amplifier Mach-Zehnder interferometer:design and simulation [J ] . Optical Engineering , 2016 , 55 ( 2 ): 1 - 12 .

JAHROMI H D , BINAIE A , ZARIFKAR A , et al . A new structure for all-optical three-input XOR logic gate based on semiconductor optical amplifier Mach-Zehnder interferometer [J ] . International Journal of Modern Physics B , 2014 , 28 ( 7 ): 1 - 11 .

KIM J Y , KANG J M , KIM T Y , et al . All-optical multiple logic gates with XOR,NOR,OR,and NAND functions using parallel SOA-MZI structures:theory and experiment [J ] . Journal of Lightwave Technology , 2006 , 24 ( 9 ): 3392 - 3399 .

WANG W R , YU J L , HAN B C , et al . Experimental research on 10 Gbit/sall-optical logic gates with return-to-zero data in high nonlinear fiber [C ] // 2011 Asia Communications and Photonics Conference and Exhibition . IEEE , 2011 : 1 - 6 .

OKUNO T , NAKANISHI T , HIRANO M , et al . Practical considerations for the application of highly nonlinear fibers [C ] // 2007 Conference on Optical Fiber Communication . IEEE , 2007 : 1 - 3 .

AGRAWAL G P . Nonlinear fiber optics fifth edition [M ] . 5th ed . Pittsburgh : Academic PressPress , 2013 .

TAKAHASHI M , SUGIZAKI R , HIROISHI J , et al . Low-loss and low-dispersion-slope highly nonlinear fibers [J ] . Journal of Lightwave Technology , 2005 , 23 ( 11 ): 3615 - 3624 .

WANG J , SUN Q , SUN J , et al . Experimental demonstration on 40 Gbit/s all-optical multicasting logic XOR gate for NRZ-DPSK signals using four-wave mixing in highly nonlinear fiber [J ] . Optics Communications , 2009 , 282 ( 13 ): 2615 - 2619 .

LI L , WU J , QIU J F , et al . Reconfigurable and simultaneous implementation of all-optical logic gate using four-wave mixing (FWM) in HNLF for NRZ-PolSK signal [C ] // 36th European Conference and Exhibition on Optical Communication . IEEE , 2010 : 1 - 3 .

VELANAS P , BOGRIS A , SYVRIDIS D . Operation properties of a reconfigurable photonic logic gate based on cross phase modulation in highly nonlinear fibers [J ] . Optical Fiber Technology , 2009 , 15 ( 1 ): 65 - 73 .

王文睿 , 于晋龙 , 罗俊 , 等 . 基于非线性光纤环镜的40Gb/s可重构光逻辑门 [J ] . 光学学报 , 2012 , 32 ( 5 ): 45 - 50 .

WANG W R , YU J L , LUO J , et al . 40Gb/s Reconfiguration all-optical logic gate based on nonlinear optical loop mirror [J ] . Journal of Optics , 2012 , 32 ( 5 ): 45 - 50 .

WANG W R , YU J L , HAN B C , et al . Experimental research on 10 Gbit/s all-optical logic gates with return-to-zero data in high nonlinear fiber [C ] // 2011 Asia Communications and Photonics Conference and Exhibition . IEEE , 2011 : 1 - 6 .

王文睿 , 于晋龙 , 韩丙辰 , 等 . 基于高非线性光纤中非线性偏振旋转效应的全光逻辑门研究 [J ] . 物理学报 , 2012 , 61 ( 8 ): 268 - 276 .

WANG W R , YU J L , HAN B C , et al . Research on all-optical logic gate based on nonlinear polarization rotation effect in highly nonlinear fiber [J ] . Journal of Physics , 2012 , 61 ( 8 ): 268 - 276 .

浏览量

467

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

新颖的正则NFA引擎构造方法

基于网络事件和深度协议分析的入侵检测研究