A Security Management Architecture for Time Synchronization towards High Precision Networks

• Published in: IEEE access Vol. 9; p. 1
• Main Authors: Li, Hongxing, Li, Dengkui, Zhang, Xiaodong, Shou, Guochu, Hu, Yihong, Liu, Yaqiong
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01.01.2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Clocks; Computer architecture; Cybersecurity; Delay; delay attacks; Delays; high precision communication; network functions virtualization; precision time protocol; Protocols; Security; Security management; Software-defined networking; Synchronization; Time synchronization; time-sensitive networking; Virtual networks
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2021.3107203

Time synchronization is quickly becoming a fundamental prerequisite for a smart society. With the development of the fifth-generation (5G) network, time-sensitive networking (TSN), and the rise of high-precision networks, its accurate and reliable features have attracted an increasing amount of attention. As the most promising protocol with sub-microsecond accuracy, precision time protocol (PTP) has been widely used for network synchronization, and its proper operation and security are critical to the industries that build the infrastructure for the smart society. In order to provide synchronization security as a service, this paper presents a scheme based on software-defined networking (SDN) and network functions virtualization (NFV) principles for synchronization security. Security management is built as a virtual network function (VNF), and a mitigation mechanism is proposed to detect delay attacks and generate countermeasures. Finally, we investigate the impact of random delay attacks, constant delay attacks, and linear delay attacks on the offset and path delay in the PTP synchronization process through experiments. The results show that the scheme is capable of detecting PTP delay attacks and mitigating their impact on time synchronization.