SecPro-INT: Secure Programmable In-Band Network Telemetry Method

In-band network telemetry (INT) can monitor network status in real-time and with high precision. It has attracted more and more attention from academia and industry. However, traditional INT system uses plaintext to transmit telemetry data, and is vulnerable to network attacks. This paper focuses on the security issues and designs a customizable encryption method in INT. In order to effectively balance security and transmission performance, this paper propose a dynamic feedback scheduling mechanism based on “security level +performance loss” Based on this, SecPro-INT as a secure INT system is designed. The experimental results indicate that Secpro-INT can quickly switch encryption algorithms based on network conditions during working. It ensures both the safety of in band telemetry and the normal operation of the network