A new SDN traffic control application for security routing in critical infrastructures

In the framework of the EU-FP7 SCOUT project, RECOVER is a subsystem that enables a satellite infrastructure, and more specifically the ground control segment, with traffic control capabilities. Basically, RECOVER applies rules (forward, drop, re-route) to traffic flows. In this paper, we discuss the preliminary architecture of the RECOVER subsystem. The design is based on SDN, a novel approach for computer networking that allows network administrators to manage network services through the abstraction of higher-level functionalities. The core of the subsystem is a new traffic control application that provides policy-based secure routing, i.e., the ability to take on routing decisions driven by physical or network security targets.