Secure dynamic routing protocols based on Cross-Layer Network Security Evaluation

In this paper, a series of novel secure dynamic routing protocols are proposed to provide the end-to-end security. Unlike the existing dynamic routing protocols with security consideration which focus on a certain specific network threat, in the paper the proposed approach is based on a comprehensive network security evaluation framework. By analyzing the threats, vulnerabilities, countermeasures, and security requirements of networks, the danger intensity of threats is systematically quantified. Then, the risk score of a link can be obtained by integrating danger intensity of all threats on this link. Since a routing path is composed of several links, three secure dynamic routing protocols, with specific security and performance requirements, are proposed to find a secure routing path according to the link risk scores. The simulation results show that the proposed secure dynamic routing protocols are able to derive a more secure routing path than traditional dynamic routing protocols, even with considering routing performance.