Enforcing Security in Multi-Service Programmable Routers for Future Internet

A multi-service programmable router is a modular node to support on demand network service virtualization and dynamic service configuration. As a key system thought for next-generation Internet scenarios, it relies on high performance optical switching fabric and modular software organization, to seamlessly meet the dynamic requirements of emerging and future applications. In this paper the security aspects, which arise when customers and service providers access node and service programmability, are discussed. Secure service support based on control and forwarding element separation is proposed and tested in a software router context to show the feasibility and the effectiveness of the approach.