Automated Selection of Security Protocols in SINET

Existing security protocols are only promoted or evaluated in one of the aspects of security or performance, but network users’ demand for network security is diverse and varied. Providing one security protocol does not meet users’ demand. Meanwhile, there is a severe phenomenon of wasting network resource. Thus, we propose a method of automated selection of security protocols (assp) in smart identifier network. This method helps to adjust the security configuration dynamically, and provides different security services for different service groups. Theoretical analysis shows that the method has advantages in performance, and has high practicability. Introduction With the development of science and technology, information science has become a great impetus to the progress of society nowadays. The application of network has penetrated into all aspects of human society such as politics, economy, culture and education. However, the openness of network makes the users and data face a lot of threat, so the network needs a robust security mechanism. In order to achieve network security protection at different layers of tcp / ip network architecture, various security protocols are prepared, such as ipsec protocol at network layer, transport layer security (tls) and secure sockets layer (ssl) at transport layer, and so on [1,2]. Ipsec provides end-to-end security services using encryption-based service protection and dynamic key management. Ssl/tls implements secure communication using authentication, signature, and encryption at transport layer. However, most of the existing security protocols [3,4,5] are designed only taking one aspect of security and performance into account from the point of the designers, but different users need different network security mechanism. Some users need a higher security mechanism, but other users are more concerned about the efficiency of the mechanism’s performance. Even to a same user, the demand of network security changes dynamically. For example, some users only browse news, web and video, etc., so they are not concerned much about the security of the protocol, but more concerned about the efficiency of the protocol and the impact on the latency. However, some others use online banking for online payment, etc., thus, they have a higher demand on the security of the protocol. Therefore, it is not appropriate for the network components to provide the same security mechanism for all services. Designers and developers should consider, for instance, latency, throughput, overhead data communication properties and hardware power consumption when designing services for pervasive environments. Providing a unified security mechanism for all users and all communications cannot satisfy customized services, moreover, it is a waste of network resources. Smart identification network (sinet) [6] uses a new network architecture including three vertical layers and two horizontal domains. Sinet can identify and describe service intelligently, perceive service requirements and network state, and cluster the network components. Sinet is aimed at perceiving changes in service demand intelligently and scheduling network resources for adaptation dynamically. In this paper, we design a dynamic and adaptive security protocol selection method based on sinet. The method can select security protocols according to the changes of service demand. On the basis of satisfying security and efficiency requirements of the different network users, this method can improve utilization of network resources. 5th International Conference on Mechatronics, Materials, Chemistry and Computer Engineering (ICMMCCE 2017) Copyright © 2017, the Authors. Published by Atlantis Press. This is an open access article under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/). Advances in Engineering Research, volume 141