Computer Communications and Networks Jacek Rak David Hutchison   Editors Guide to Disaster-Resilient Communication Networks Computer Communications and Networks Series Editors Jacek Rak, Department of Computer Communications, Faculty of Electronics, Telecommunications and Informatics, Gdańsk University of Technology, Gdańsk, Poland A. J. Sammes, Cyber Security Centre, Faculty of Technology, De Montfort University, Leicester, UK Editorial Board Burak Kantarci , School of Electrical Engineering and Computer Science, University of Ottawa, Ottawa, ON, Canada Eiji Oki, Graduate School of Informatics, Kyoto University, Kyoto, Japan Adrian Popescu, Department of Computer Science and Engineering, Blekinge Institute of Technology, Karlskrona, Sweden Gangxiang Shen, School of Electronic and Information Engineering, Soochow University, Suzhou, China The Computer Communications and Networks series is a range of textbooks, monographs and handbooks. It sets out to provide students, researchers, and non-specialists alike with a sure grounding in current knowledge, together with comprehensibleaccesstothelatestdevelopmentsincomputercommunicationsand networking. Emphasisisplacedonclearandexplanatorystylesthatsupportatutorialapproach, so that even the most complex of topics is presented in a lucid and intelligible manner. More information about this series at http://www.springer.com/series/4198 Jacek Rak David Hutchison (cid:129) Editors Guide to Disaster-Resilient Communication Networks 123 Editors JacekRak DavidHutchison Department ofComputer Communications Schoolof Computing andCommunications Gdańsk University of Technology Lancaster University Gdańsk,Poland Lancaster,UK ISSN 1617-7975 ISSN 2197-8433 (electronic) Computer Communications andNetworks ISBN978-3-030-44684-0 ISBN978-3-030-44685-7 (eBook) https://doi.org/10.1007/978-3-030-44685-7 ©SpringerNatureSwitzerlandAG2020 Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpart of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission orinformationstorageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilar methodologynowknownorhereafterdeveloped. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publicationdoesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfrom therelevantprotectivelawsandregulationsandthereforefreeforgeneraluse. The publisher, the authors and the editors are safe to assume that the advice and information in this book are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or the editors give a warranty, expressed or implied, with respect to the material contained hereinorforanyerrorsoromissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregard tojurisdictionalclaimsinpublishedmapsandinstitutionalaffiliations. ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland We dedicate this book to our dear friend and colleague James P.G. Sterbenz, who passed away early, in 2019. We will always remember and cherish the many discussions we had with James about the topic of resilience for communication networks—and the many hours each of us spent together with him at meetings and conferences across the world. His animated presence is something we will never forget. During the preparation of this book, we have constantly remembered the tremendous contribution that James made to our collective understanding of resilience and resilient networked systems. Preface Our lives have become dependent on networked communication systems offering everyday access to important, established services and emerging communication technologies.Formanypeople,especiallytheyoungergeneration,itisnowscarcely possible to live without the Internet—the global communication infrastructure. Similarly, most business services require communication networks to be always available. However, networked systems are continuously faced with a broad set of challenges,oftenleadingtofailuresoflinksornodesandofothersystemcomponents. Accordingtostatistics,themajority (i.e. around 60–70%) offailure eventsrefer tooutagesofsinglecommunicationlinks,e.g.duetounintentionalcutsoflinksby thirdparties.However,thereisavisiblygrowingshareofmassivefailurescenarios affectingmultiplenetworkelementsatatime,inacorrelatedmanner,whichcanbe classified into the four following groups: (a) natural disasters (such as earthquakes, hurricanes, floods, fires or tornadoes leading to permanent failures); (b) weather-induced disruptions (including the impact of heavy rain/fog on the performanceofhigh-frequencylinkscausingtemporalbutfrequentdegradation of the available capacity of multiple wireless links); (c) technology-related massive failures (e.g. due to power blackout, failure prop- agation in interdependent networks or software failures); (d) malicious attacks originated by humans. As people are often at risk in many such scenarios, proper functioning of net- workedsystems inpost-disaster periodsisespecially crucial for humanstobeable to communicate with their relatives or to receive disaster-related information. Availabilityofpubliccommunicationnetworksisthenalsocriticalforgovernments and emergency departments, which often switch to public networks due to their resources and coverage to disseminate emergency information. Therefore, com- munication networks are undoubtedly an essential part of the critical infrastructure (along with emergency services, energy, water, and transport). What is more, correlated massive failures in communication networks can even become a danger to homeland security if some government or military services are affected. vii viii Preface It is well known that failures in communication systems cannot be eliminated entirely. Therefore, providing service continuity in failure scenarios is typically achieved by applying redundancy mechanisms for hardware and software, which, however, may be challenging in cases of highly correlated multiple failures. Additionally, in post-disaster periods, we can observe significantly increased activitiesofpeopleinthenetwork(oftenseveraltimeshigherthanusual)drivenby the need to get and exchange information. For a communication network affected by a disaster, such an increase in the network traffic becomes even more problematic. The major observation from past disasters is that design of disaster-resilient communication systems should be based on the application of resilience mecha- nismstailoredtothecorrelatednatureofmassivefailures(oftenconfinedtospecific regions—for example natural disasters occurring in given areas). Similarly, to improve disaster resilience of an existing networked system, methodologies nec- essary to evaluate the vulnerability of a system to disaster-induced failures should be provided. However, a set of recent disaster events has shown that the resilience mecha- nisms employed in contemporary networked systems are often not sufficient. As a result, in post-disaster periods, dissemination of emergency information and coor- dination of relief operations commonly become barely possible. At the same time, people may not be able to get access to information when they need it most. The importance of the problem is also magnified by an increased frequency of occur- rence of massive events such as natural disasters or malicious human activities observed over the last two decades. Therefore, instead of focusing only on com- munication resilience in its conventional sense (i.e. related to single, uncorrelated failures),networkoperators,networkingequipmentvendors,andregulatorsneedto focus their attention specifically on disaster resilience—defined inthis monograph astheabilityofanetworktoprovideandmaintainanacceptablelevelofservicein the face of disaster-induced faults and challenges to normal operation. The objective of this monograph is to provide comprehensive guidelines con- cerning the application of mechanisms for the evaluation of disaster resilience of networked systems, design or update of their architectures with improved disaster resilience, and information dissemination relevant for all major types of massive failure scenarios (i.e. natural disasters, weather-induced disruptions, technology-related massive failures, and malicious human activities). The monograph consists of 32 chapters structured into the four following parts: I. Measures and Models for the Analysis and Evaluation of Disaster-Resilient Communication Networks; II. Techniques for Design and Update of Disaster-Resilient Systems; III. Algorithms and Schemes for Resilient Systems; IV. Advanced Topics in Resilient Communication Systems. Preface ix In particular, following the opening Chap. 1, Part I of this book includes chaptersfocusingontechniquesforassessingvulnerabilityofnetworkedsystemsto massive failures, including functional metrics (Chap. 2), identification of critical nodes and links (Chap. 3), determination of regions vulnerable to disaster-induced failures (Chap. 4), analysis of impact of destructive strategies for attacking net- works (Chap. 5), and modelling of software failures (Chap. 6). Part II focuses on architectures for disaster-resilient systems and starts with chapters dedicated to survivability of carrier networks (Chap. 7), security-aware network planning (Chap. 8), secure and resilient communications in the industrial Internet (Chap. 9), reliable control and data planes for softwarized networks (Chap.10),anddesignofemergencynetworksforpost-disasterscenarios(Chap.11). Itnextreferstothedesignofarchitecturesofwirelesssystemsfocusing,inparticular, ontheQualityofService(Chap.12),anddesignofresilientfree-spaceopticalsys- tems(Chap.13).Finally,itincludeschaptersrelatedtothedesignofdisaster-resilient content-oriented networked systems equipped with mechanisms of alert-based net- workreconfigurationanddataevacuation(Chap.14),resilienceagainstdisruptionsof volatilecloudresources(Chap.15),andtechniquesforimprovingtherobustnessof anycastcommunicationsundermassivefailures(Chap.16). Algorithmsandschemesforresilientsystemspresentedinchaptersbelongingto PartIIIofthismonographincludefundamentalmethodstodeterminedisjointpaths for multiple failure scenarios (Chap. 17), schemes for resilient routing (Chap. 18), and especially those suitable for regional failures (Chap. 19), resilient communi- cations under adverse weather conditions (SDN-based routing in Chap. 20 and optimization methods for radio and optical wireless networks in Chap. 21), enhancement of availability for critical services (Chap. 22), attack-survivable routing (Chap. 23), and routing in post-disaster scenarios (Chap. 24). Inthelastpart(IV)ofthismonograph,wepresentasetoftechniquesaddressing advancedtopicsinresilientcommunicationsystems,includingresilientSDN,CDN and ICN technology and solutions (Chap. 25), intrusion detection and prevention systems based on SDN and NFV (Chap. 26), resilient NFV technology and solu- tions (Chap. 27), resilience of 5G mobile communication systems to massive dis- ruptions(Chap.28),designofresilientvehicle-to-infrastructuresystems(Chap.29), reliabilitymodels formulti-objectivedesignproblems(Chap.30),disaster-induced cascadingeffectsinhybridcriticalinfrastructures(Chap.31),aswellashumanand organizational issues for resilient communications (Chap. 32). As massive failures havedifferent characteristics indifferent regionsand notall of them occur everywhere and with the same intensity, duration, and scale (e.g. earthquakes and fires), a comprehensive analysis of the problem requires the involvement of researchers from diverse regions and reflecting different points of view (academic, industrial, and governmental). We believe this monograph is the first one to meet these requirements fully, since it presents the major results of scientific collaboration of over 100 researchers from over 50 leading academic, industrial(networkoperators),andgovernmentalunitsfrom31Europeancountries, Canada, and the USA in the period of the four years (from March 2016 until February2020)oftheRECODISActionduration.(ThefullnameofRECODISis: x Preface “COST CA15127—Resilient communication services protecting end-user appli- cations from disaster-induced failures”, https://www.cost.eu/actions/CA15127/) supported by COST.1 This monograph is intended to serve as a reference guide primarily for network operators, networking equipment vendors, and network regulators to provide sup- portinthedesignofnetworkedsystems,networkingequipmentincludingsoftware, andfortherelevantregulations.Itcanalsosupportacademiccoursesinnetworked systems resilience for graduate and Ph.D. students. Gdańsk, Poland Jacek Rak Lancaster, UK David Hutchison February 2020 1COST (European Cooperation in Science and Technology) is a pan-European research programmethathasbeeninoperationsince1971.ThemissionofCOST,re-statedandreinforced in 2018, is that it “provides networking opportunities for researchers and innovators in order to strengthenEurope’scapacitytoaddressscientific,technologicalandsocietalchallenges”.