Satellite Network Protection against PEP- Related Vulnerabilities

This paper deals with security for heterogeneous and inter-operable communication networks including a satellite segment. Integration of different networks enhances sustainable applications but specific vulnerabilities must be faced up too. INTERSECTION project is aimed to both design and implement an Intrusion Detection System (IDS) for the detention of anomalous events in the interconnected networks attributable to security attacks. The present work is focused on the application of INTERSECTION IDS on the target scenario, where the presence of Proxy Enhancing Proxies (PEPs) at the edges of satellite links leads to the twofold effect of improving TCP performance but also increasing a PEP-related vulnerability due to the violation of the end-to-end semantic of TCP. Then, the paper addresses the above mentioned issue through the realization of a test bed including a real geostationary satellite link operated by Telespazio.