SlideShare a Scribd company logo
1 of 11
Achieving resilient and assured PNT in secure information networks
June 8, 2022 (9:15-9:35a) | JNC, San Diego, CA | Chuck Perry, Sync Business Development Manager NA, Oscilloquartz
Resilient PNT mandate | Ideal PNT architecture | Best PNT practices for defense-in-depth security
PNT* cyber threats are at an all-time high everywhere and are
growing in sophistication
*Positioning, Navigation & Timing | T enables P & N | aPNT+ (assured PNT)
Pentagon
Army
Space Force
Air Force
Navy
PNT
assurance
© 2022 ADVA. All rights reserved.
3
Driven by US Federal Executive Order 13905 and UK and Euro Commissions
• PNT stands for Positioning, Navigation & Timing, and T is essential to enable P & N
• Protect government/industry critical infrastructure against PNT disruptions from GPS
jamming/spoofing and network timing cyberattacks
• Deploy resilient, assured and self-survivable PNT systems with defense-in-depth capability
• Target critical infrastructure under national security threats
• Use published resilient PNT guidelines and standard in progress
• DHS Resilient PNT Conformance Framework
• NIST Cybersecurity Framework for PNT Profile
• IEEE P1952 Resilient PNT for User Equipment Standard working group
What is the resilient PNT?
Power grids Finance Transportation Communications Data centers
resiliency levels
clock sources
1
2
3
N
multisource
1 2 3 4
next-gen
system
© 2022 ADVA. All rights reserved.
4
Critical infrastructure under warfighting and homeland security threats
If GPS is disrupted or compromised
Finance
Communications
Power grids
Transportation Data centers
All supported by
PNT cyber
threats
GPS
© 2022 ADVA. All rights reserved.
5
What are the PNT cyberthreats and GNSS vulnerabilities?
RARE
Cyberattacks
GPS/GNSS
receiver
Jamming
RARE
GPS/GNSS
degradation
causes
Environmental
GPS/GNSS ground
segment errors
Adjacent-band
transmitters
Spoofing
External GPS/GNSS level Internal network level
COMMON
NTP
PTP
More frequent
PNT cyber
threats
/ /
Network
interference
Client clock
Boundary
clock
© 2022 ADVA. All rights reserved.
6
Networkwide
Sync Mgmt
WAN network
packet LAN network
Redundant timing architecture with a single GPS source
Data comm Center 1
(DC 1)
GM-A
(GNSS NTP/PTP
grandmaster time server)
Data comm Center 2
(DC 2)
PTP failover backup
cross reference monitoring
1
2
3
GPS/GNSS
GM-B
PTP
Client machine/server/VM
running critical command and
control applications
PTP
4
NTP 4 4
Client software sync
monitor
PNT
assurance
Networkwide sync
management
© 2022 ADVA. All rights reserved.
7
WAN network
packet LAN network
“Zero-trust multisource backup” timing architecture
DC 1
ePRTC*
DC 2
PTP failover backup
Cross reference monitoring
1
3
GM-B
2
PNT backup
sources
PNT
assurance
Cesium, NIST, WR,
eLORAN, LEO, etc.
National time
standard like NIST
*Enhanced Primary
reference time clock
(GM-A + backup
sources)
1
Networkwide
Sync Mgmt
Networkwide sync
management
PTP
Client machine/server/VM
running critical command and
control applications
PTP
5
NTP 5 5
Client software sync
monitor
4
© 2022 ADVA. All rights reserved.
8
WAN network
packet LAN network
“Zero-trust multi-source backup” timing architecture
DC 1
ePRTC*
DC 2
PTP failover backup
Cross reference monitoring
1
3
GM-B
2
PNT backup
sources
PNT
assurance
Cesium, NIST, WR,
eLORAN, LEO, etc.
National time
standard like NIST
*Enhanced primary
reference time clock
(GM-A + backup
sources)
1
Networkwide
Sync Mgmt
Networkwide sync
management
PTP
Client machine/server/VM
running critical command and
control applications
PTP
5
NTP 5 5
Client software sync
monitor
4
Worst
case
scenario:
GPS sats
shot down
© 2022 ADVA. All rights reserved.
9
PPS/PPS+ToD
10MHz
BITS
SyncE
PTP
How ePRTC cesium backup timing works
GNSS MB
receiver Time/phase holdover if GPS/GNSS goes down
ePRTC+ solution: 100ns over 100 days
Anti-jam
antenna
14 days
coreSync
Optical cesium atomic clock
Multi-source
clock combiner
Grandmaster
clock
Next-Gen Optical
Cesium clock
GPS Time error
100ns
30ns
edgeSync
grandmaster
ePRTC+ solution
(functional diagram)
✓
Other sources
GPS
GPS + combiner integrated into the grandmaster
© 2022 ADVA. All rights reserved.
10
Secure network-wide sync management
Neural AI/ML intelligence for self-survivability, end-to-end control,
visibility, resilient and assured PNT
Geolocation DCs 1 and 2 alert
PTP backup assurance to DC 2
Timing chain alert with ePRTC/
PTP backup rearrangements
DC 1 GM-A alert with ePRTC/PTP backup to DC 2
Timing topology with
ePRTC/PTP backup
Vendor-agnostic GNSS
analytics/assurance
PTP backup
ePRTC backup DC 2
DC 1
DC 2
DC 1
DC 2
DC 1 DC 2
PTP backup
ePRTC backup
DC 1
DC 2
8
6
5
3
2
1
DC 2 GM-B alert with PTP
backup from DC 1 ePRTC
4
Client sync monitor
7
Interoperability with
other command and
control systems
API
Open
interface
9
Networkwide
Sync Mgmt
Networkwide sync
management
9
• Secure communications
• MIL 5G PNT systems (land, air, sea)
• Command and control centers
• Radar event tagging system
• SATCOM ground stations
• SATCOM network operations centers
Thank you
IMPORTANT NOTICE
ADVA is the exclusive owner or licensee of the content, material, and information in this presentation. Any reproduction, publication or reprint, in whole or in part, is strictly prohibited.
The information in this presentation may not be accurate, complete or up to date, and is provided without warranties or representations of any kind, either express or implied. ADVA shall not be responsible for and disclaims any liability for any loss or damages, including without limitation,
direct, indirect, incidental, consequential and special damages, alleged to have been caused by or in connection with using and/or relying on the information contained in this presentation.
Copyright © for the entire content of this presentation: ADVA.
info@adva.com

More Related Content

What's hot

Introducing GNSS/GPS backup as a service (GBaaS)
Introducing GNSS/GPS backup as a service (GBaaS)Introducing GNSS/GPS backup as a service (GBaaS)
Introducing GNSS/GPS backup as a service (GBaaS)ADVA
 
Building on TAP sync resiliency for the cloud
Building on TAP sync resiliency for the cloud Building on TAP sync resiliency for the cloud
Building on TAP sync resiliency for the cloud Adtran
 
Growth and sustainability aspects of WDM
Growth and sustainability aspects of WDMGrowth and sustainability aspects of WDM
Growth and sustainability aspects of WDMADVA
 
Synchronization for 5G: the requirements and the solutions
Synchronization for 5G: the requirements and the solutionsSynchronization for 5G: the requirements and the solutions
Synchronization for 5G: the requirements and the solutionsADVA
 
Best practices in synchronizing IP-based packet broadcasting networks
Best practices in synchronizing IP-based packet broadcasting networksBest practices in synchronizing IP-based packet broadcasting networks
Best practices in synchronizing IP-based packet broadcasting networksADVA
 
OIF 112G Panel at DesignCon 2017
OIF 112G Panel at DesignCon 2017OIF 112G Panel at DesignCon 2017
OIF 112G Panel at DesignCon 2017Deborah Porchivina
 
Best practices in solving PNT threats in critical defense communications infr...
Best practices in solving PNT threats in critical defense communications infr...Best practices in solving PNT threats in critical defense communications infr...
Best practices in solving PNT threats in critical defense communications infr...Adtran
 
Inject precise synchronization into open compute servers
Inject precise synchronization into open compute serversInject precise synchronization into open compute servers
Inject precise synchronization into open compute serversADVA
 
Timing and synchronization for 5G over optical networks
Timing and synchronization for 5G over optical networksTiming and synchronization for 5G over optical networks
Timing and synchronization for 5G over optical networksADVA
 
Synchronizing 5G networks
Synchronizing 5G networksSynchronizing 5G networks
Synchronizing 5G networksADVA
 
Introducing the market's first high-performance optical cesium clock
Introducing the market's first high-performance optical cesium clockIntroducing the market's first high-performance optical cesium clock
Introducing the market's first high-performance optical cesium clockADVA
 
GNSS and Timing: the Need for a Global PNT Infrastructure
GNSS and Timing: the Need for a Global PNT InfrastructureGNSS and Timing: the Need for a Global PNT Infrastructure
GNSS and Timing: the Need for a Global PNT InfrastructureMarco Lisi
 
Ericsson 5G learning portfolio 2018
Ericsson 5G learning portfolio 2018Ericsson 5G learning portfolio 2018
Ericsson 5G learning portfolio 2018Ericsson
 
Meet stringent latency demands with time-sensitive networking
Meet stringent latency demands with time-sensitive networkingMeet stringent latency demands with time-sensitive networking
Meet stringent latency demands with time-sensitive networkingADVA
 
Single vs. multi-carrier in ROADM networks
Single vs. multi-carrier in ROADM networksSingle vs. multi-carrier in ROADM networks
Single vs. multi-carrier in ROADM networksADVA
 
O-RAN and the enterprise
O-RAN and the enterpriseO-RAN and the enterprise
O-RAN and the enterpriseADVA
 
Comparison of MQTT and DDS as M2M Protocols for the Internet of Things
Comparison of MQTT and DDS as M2M Protocols for the Internet of ThingsComparison of MQTT and DDS as M2M Protocols for the Internet of Things
Comparison of MQTT and DDS as M2M Protocols for the Internet of ThingsReal-Time Innovations (RTI)
 
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10Ike Alisson
 
Introducing Coherent 100ZR for the optical edge
Introducing Coherent 100ZR for the optical edgeIntroducing Coherent 100ZR for the optical edge
Introducing Coherent 100ZR for the optical edgeADVA
 
ADVA aPNT+™ security enhancements
ADVA aPNT+™ security enhancementsADVA aPNT+™ security enhancements
ADVA aPNT+™ security enhancementsADVA
 

What's hot (20)

Introducing GNSS/GPS backup as a service (GBaaS)
Introducing GNSS/GPS backup as a service (GBaaS)Introducing GNSS/GPS backup as a service (GBaaS)
Introducing GNSS/GPS backup as a service (GBaaS)
 
Building on TAP sync resiliency for the cloud
Building on TAP sync resiliency for the cloud Building on TAP sync resiliency for the cloud
Building on TAP sync resiliency for the cloud
 
Growth and sustainability aspects of WDM
Growth and sustainability aspects of WDMGrowth and sustainability aspects of WDM
Growth and sustainability aspects of WDM
 
Synchronization for 5G: the requirements and the solutions
Synchronization for 5G: the requirements and the solutionsSynchronization for 5G: the requirements and the solutions
Synchronization for 5G: the requirements and the solutions
 
Best practices in synchronizing IP-based packet broadcasting networks
Best practices in synchronizing IP-based packet broadcasting networksBest practices in synchronizing IP-based packet broadcasting networks
Best practices in synchronizing IP-based packet broadcasting networks
 
OIF 112G Panel at DesignCon 2017
OIF 112G Panel at DesignCon 2017OIF 112G Panel at DesignCon 2017
OIF 112G Panel at DesignCon 2017
 
Best practices in solving PNT threats in critical defense communications infr...
Best practices in solving PNT threats in critical defense communications infr...Best practices in solving PNT threats in critical defense communications infr...
Best practices in solving PNT threats in critical defense communications infr...
 
Inject precise synchronization into open compute servers
Inject precise synchronization into open compute serversInject precise synchronization into open compute servers
Inject precise synchronization into open compute servers
 
Timing and synchronization for 5G over optical networks
Timing and synchronization for 5G over optical networksTiming and synchronization for 5G over optical networks
Timing and synchronization for 5G over optical networks
 
Synchronizing 5G networks
Synchronizing 5G networksSynchronizing 5G networks
Synchronizing 5G networks
 
Introducing the market's first high-performance optical cesium clock
Introducing the market's first high-performance optical cesium clockIntroducing the market's first high-performance optical cesium clock
Introducing the market's first high-performance optical cesium clock
 
GNSS and Timing: the Need for a Global PNT Infrastructure
GNSS and Timing: the Need for a Global PNT InfrastructureGNSS and Timing: the Need for a Global PNT Infrastructure
GNSS and Timing: the Need for a Global PNT Infrastructure
 
Ericsson 5G learning portfolio 2018
Ericsson 5G learning portfolio 2018Ericsson 5G learning portfolio 2018
Ericsson 5G learning portfolio 2018
 
Meet stringent latency demands with time-sensitive networking
Meet stringent latency demands with time-sensitive networkingMeet stringent latency demands with time-sensitive networking
Meet stringent latency demands with time-sensitive networking
 
Single vs. multi-carrier in ROADM networks
Single vs. multi-carrier in ROADM networksSingle vs. multi-carrier in ROADM networks
Single vs. multi-carrier in ROADM networks
 
O-RAN and the enterprise
O-RAN and the enterpriseO-RAN and the enterprise
O-RAN and the enterprise
 
Comparison of MQTT and DDS as M2M Protocols for the Internet of Things
Comparison of MQTT and DDS as M2M Protocols for the Internet of ThingsComparison of MQTT and DDS as M2M Protocols for the Internet of Things
Comparison of MQTT and DDS as M2M Protocols for the Internet of Things
 
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10
CNCF TUG (Telecom User Group) Ike Alisson 5G New Service Capabilities Rev pa10
 
Introducing Coherent 100ZR for the optical edge
Introducing Coherent 100ZR for the optical edgeIntroducing Coherent 100ZR for the optical edge
Introducing Coherent 100ZR for the optical edge
 
ADVA aPNT+™ security enhancements
ADVA aPNT+™ security enhancementsADVA aPNT+™ security enhancements
ADVA aPNT+™ security enhancements
 

Similar to Achieving resilient and assured PNT in secure information networks

Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...
Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...
Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...ADVA
 
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...ADVA
 
ADVA launches new aPNT+™ platform to protect critical network infrastructure
ADVA launches new aPNT+™ platform to protect critical network infrastructureADVA launches new aPNT+™ platform to protect critical network infrastructure
ADVA launches new aPNT+™ platform to protect critical network infrastructureADVA
 
Best practices for secure synchronization in smart grids
Best practices for secure synchronization in smart gridsBest practices for secure synchronization in smart grids
Best practices for secure synchronization in smart gridsADVA
 
Best sync practices and architecture strategies for secure, resilient PNT in ...
Best sync practices and architecture strategies for secure, resilient PNT in ...Best sync practices and architecture strategies for secure, resilient PNT in ...
Best sync practices and architecture strategies for secure, resilient PNT in ...ADVA
 
ADVA’s telecommunications solutions for smart grids
ADVA’s telecommunications solutions for smart grids ADVA’s telecommunications solutions for smart grids
ADVA’s telecommunications solutions for smart grids ADVA
 
Time and Phase Delivery
Time and Phase DeliveryTime and Phase Delivery
Time and Phase DeliveryADVA
 
NextGen Network Synchronization
NextGen Network SynchronizationNextGen Network Synchronization
NextGen Network SynchronizationDhiman Chowdhury
 
Best practices for secure PNT management in a multi vendor environment
Best practices for secure PNT management in a multi vendor environmentBest practices for secure PNT management in a multi vendor environment
Best practices for secure PNT management in a multi vendor environmentAdtran
 
Protecting third-party timing receivers from cyberattacks with trusted networ...
Protecting third-party timing receivers from cyberattacks with trusted networ...Protecting third-party timing receivers from cyberattacks with trusted networ...
Protecting third-party timing receivers from cyberattacks with trusted networ...ADVA
 
Recent growth in timing
Recent growth in timingRecent growth in timing
Recent growth in timingADVA
 
What is the future of traditional SSUs and TSGs?
What is the future of traditional SSUs and TSGs?What is the future of traditional SSUs and TSGs?
What is the future of traditional SSUs and TSGs?ADVA
 
In Service Monitoring and Assurance at ITSF 2014
In Service Monitoring and Assurance at ITSF 2014 In Service Monitoring and Assurance at ITSF 2014
In Service Monitoring and Assurance at ITSF 2014 ADVA
 
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...ADVA
 
Precise and assured timing for enterprise networks
Precise and assured timing for enterprise networksPrecise and assured timing for enterprise networks
Precise and assured timing for enterprise networksADVA
 
Synchronizing power networks
Synchronizing power networksSynchronizing power networks
Synchronizing power networksADVA
 
Assured timing for power networks
Assured timing for power networksAssured timing for power networks
Assured timing for power networksAdtran
 
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters A new benchmark for timing success - OSA 5412 and 5422 access grandmasters
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters ADVA
 
Get your timing right for 5G OpenRAN!
Get your timing right for 5G OpenRAN!Get your timing right for 5G OpenRAN!
Get your timing right for 5G OpenRAN!ADVA
 

Similar to Achieving resilient and assured PNT in secure information networks (20)

Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...
Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...
Best practices for resilient NIST/UTC traceable sub-µsec timestamping of fina...
 
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...
The need for GBaaS as GPS/GNSS is no longer a reliable source for critical PN...
 
ADVA launches new aPNT+™ platform to protect critical network infrastructure
ADVA launches new aPNT+™ platform to protect critical network infrastructureADVA launches new aPNT+™ platform to protect critical network infrastructure
ADVA launches new aPNT+™ platform to protect critical network infrastructure
 
Best practices for secure synchronization in smart grids
Best practices for secure synchronization in smart gridsBest practices for secure synchronization in smart grids
Best practices for secure synchronization in smart grids
 
Best sync practices and architecture strategies for secure, resilient PNT in ...
Best sync practices and architecture strategies for secure, resilient PNT in ...Best sync practices and architecture strategies for secure, resilient PNT in ...
Best sync practices and architecture strategies for secure, resilient PNT in ...
 
ADVA’s telecommunications solutions for smart grids
ADVA’s telecommunications solutions for smart grids ADVA’s telecommunications solutions for smart grids
ADVA’s telecommunications solutions for smart grids
 
Time and Phase Delivery
Time and Phase DeliveryTime and Phase Delivery
Time and Phase Delivery
 
NextGen Network Synchronization
NextGen Network SynchronizationNextGen Network Synchronization
NextGen Network Synchronization
 
Best practices for secure PNT management in a multi vendor environment
Best practices for secure PNT management in a multi vendor environmentBest practices for secure PNT management in a multi vendor environment
Best practices for secure PNT management in a multi vendor environment
 
Protecting third-party timing receivers from cyberattacks with trusted networ...
Protecting third-party timing receivers from cyberattacks with trusted networ...Protecting third-party timing receivers from cyberattacks with trusted networ...
Protecting third-party timing receivers from cyberattacks with trusted networ...
 
Recent growth in timing
Recent growth in timingRecent growth in timing
Recent growth in timing
 
What is the future of traditional SSUs and TSGs?
What is the future of traditional SSUs and TSGs?What is the future of traditional SSUs and TSGs?
What is the future of traditional SSUs and TSGs?
 
In Service Monitoring and Assurance at ITSF 2014
In Service Monitoring and Assurance at ITSF 2014 In Service Monitoring and Assurance at ITSF 2014
In Service Monitoring and Assurance at ITSF 2014
 
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...
Time sync: Existing mobile networks need to be ready for 5G and time-sensitiv...
 
Precise and assured timing for enterprise networks
Precise and assured timing for enterprise networksPrecise and assured timing for enterprise networks
Precise and assured timing for enterprise networks
 
Synchronizing power networks
Synchronizing power networksSynchronizing power networks
Synchronizing power networks
 
Assured timing for power networks
Assured timing for power networksAssured timing for power networks
Assured timing for power networks
 
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters A new benchmark for timing success - OSA 5412 and 5422 access grandmasters
A new benchmark for timing success - OSA 5412 and 5422 access grandmasters
 
Time Synchronisation
Time SynchronisationTime Synchronisation
Time Synchronisation
 
Get your timing right for 5G OpenRAN!
Get your timing right for 5G OpenRAN!Get your timing right for 5G OpenRAN!
Get your timing right for 5G OpenRAN!
 

More from ADVA

Industrial optically pumped cesium beam clock
Industrial optically pumped cesium beam clockIndustrial optically pumped cesium beam clock
Industrial optically pumped cesium beam clockADVA
 
Industry's longest holdover with the OSA 3350 SePRC™ optical cesium clock
Industry's longest holdover with the OSA 3350  SePRC™ optical cesium clockIndustry's longest holdover with the OSA 3350  SePRC™ optical cesium clock
Industry's longest holdover with the OSA 3350 SePRC™ optical cesium clockADVA
 
Introducing Ensemble Cloudlet for on-premises cloud demand
Introducing Ensemble Cloudlet for on-premises cloud demandIntroducing Ensemble Cloudlet for on-premises cloud demand
Introducing Ensemble Cloudlet for on-premises cloud demandADVA
 
Making networks secure with multi-layer encryption
Making networks secure with multi-layer encryptionMaking networks secure with multi-layer encryption
Making networks secure with multi-layer encryptionADVA
 
Quantum threat: How to protect your optical network
Quantum threat: How to protect your optical networkQuantum threat: How to protect your optical network
Quantum threat: How to protect your optical networkADVA
 
Optical networks and the ecodesign tradeoff between climate change mitigation...
Optical networks and the ecodesign tradeoff between climate change mitigation...Optical networks and the ecodesign tradeoff between climate change mitigation...
Optical networks and the ecodesign tradeoff between climate change mitigation...ADVA
 
Trends in next-generation data center interconnects (DCI)
Trends in next-generation data center interconnects (DCI)Trends in next-generation data center interconnects (DCI)
Trends in next-generation data center interconnects (DCI)ADVA
 
Open optical edge connecting mobile access networks
Open optical edge connecting mobile access networksOpen optical edge connecting mobile access networks
Open optical edge connecting mobile access networksADVA
 
Introducing Adva Network Security – a trusted German anchor
Introducing Adva Network Security – a trusted German anchorIntroducing Adva Network Security – a trusted German anchor
Introducing Adva Network Security – a trusted German anchorADVA
 
Meet the industry's first pluggable 10G demarcation device
Meet the industry's first pluggable 10G demarcation deviceMeet the industry's first pluggable 10G demarcation device
Meet the industry's first pluggable 10G demarcation deviceADVA
 
Introducing ADVA AccessWave25™
Introducing ADVA AccessWave25™Introducing ADVA AccessWave25™
Introducing ADVA AccessWave25™ADVA
 
10G edge technology for outdoor environments
10G edge technology for outdoor environments10G edge technology for outdoor environments
10G edge technology for outdoor environmentsADVA
 
The quantum age - secure transport networks
The quantum age - secure transport networksThe quantum age - secure transport networks
The quantum age - secure transport networksADVA
 
From leased lines to optical spectrum services
From leased lines to optical spectrum servicesFrom leased lines to optical spectrum services
From leased lines to optical spectrum servicesADVA
 
The coherent optical edge
The coherent optical edgeThe coherent optical edge
The coherent optical edgeADVA
 
Best practices in synchronizing IP-based packet broadcast networks
Best practices in synchronizing IP-based packet broadcast networksBest practices in synchronizing IP-based packet broadcast networks
Best practices in synchronizing IP-based packet broadcast networksADVA
 

More from ADVA (16)

Industrial optically pumped cesium beam clock
Industrial optically pumped cesium beam clockIndustrial optically pumped cesium beam clock
Industrial optically pumped cesium beam clock
 
Industry's longest holdover with the OSA 3350 SePRC™ optical cesium clock
Industry's longest holdover with the OSA 3350  SePRC™ optical cesium clockIndustry's longest holdover with the OSA 3350  SePRC™ optical cesium clock
Industry's longest holdover with the OSA 3350 SePRC™ optical cesium clock
 
Introducing Ensemble Cloudlet for on-premises cloud demand
Introducing Ensemble Cloudlet for on-premises cloud demandIntroducing Ensemble Cloudlet for on-premises cloud demand
Introducing Ensemble Cloudlet for on-premises cloud demand
 
Making networks secure with multi-layer encryption
Making networks secure with multi-layer encryptionMaking networks secure with multi-layer encryption
Making networks secure with multi-layer encryption
 
Quantum threat: How to protect your optical network
Quantum threat: How to protect your optical networkQuantum threat: How to protect your optical network
Quantum threat: How to protect your optical network
 
Optical networks and the ecodesign tradeoff between climate change mitigation...
Optical networks and the ecodesign tradeoff between climate change mitigation...Optical networks and the ecodesign tradeoff between climate change mitigation...
Optical networks and the ecodesign tradeoff between climate change mitigation...
 
Trends in next-generation data center interconnects (DCI)
Trends in next-generation data center interconnects (DCI)Trends in next-generation data center interconnects (DCI)
Trends in next-generation data center interconnects (DCI)
 
Open optical edge connecting mobile access networks
Open optical edge connecting mobile access networksOpen optical edge connecting mobile access networks
Open optical edge connecting mobile access networks
 
Introducing Adva Network Security – a trusted German anchor
Introducing Adva Network Security – a trusted German anchorIntroducing Adva Network Security – a trusted German anchor
Introducing Adva Network Security – a trusted German anchor
 
Meet the industry's first pluggable 10G demarcation device
Meet the industry's first pluggable 10G demarcation deviceMeet the industry's first pluggable 10G demarcation device
Meet the industry's first pluggable 10G demarcation device
 
Introducing ADVA AccessWave25™
Introducing ADVA AccessWave25™Introducing ADVA AccessWave25™
Introducing ADVA AccessWave25™
 
10G edge technology for outdoor environments
10G edge technology for outdoor environments10G edge technology for outdoor environments
10G edge technology for outdoor environments
 
The quantum age - secure transport networks
The quantum age - secure transport networksThe quantum age - secure transport networks
The quantum age - secure transport networks
 
From leased lines to optical spectrum services
From leased lines to optical spectrum servicesFrom leased lines to optical spectrum services
From leased lines to optical spectrum services
 
The coherent optical edge
The coherent optical edgeThe coherent optical edge
The coherent optical edge
 
Best practices in synchronizing IP-based packet broadcast networks
Best practices in synchronizing IP-based packet broadcast networksBest practices in synchronizing IP-based packet broadcast networks
Best practices in synchronizing IP-based packet broadcast networks
 

Recently uploaded

Streamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupStreamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Scott Keck-Warren
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxhariprasad279825
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar
 
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsSergiu Bodiu
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy
 
Unraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfUnraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfAlex Barbosa Coqueiro
 
Vector Databases 101 - An introduction to the world of Vector Databases
Vector Databases 101 - An introduction to the world of Vector DatabasesVector Databases 101 - An introduction to the world of Vector Databases
Vector Databases 101 - An introduction to the world of Vector DatabasesZilliz
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024The Digital Insurer
 
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Wonjun Hwang
 
Search Engine Optimization SEO PDF for 2024.pdf
Search Engine Optimization SEO PDF for 2024.pdfSearch Engine Optimization SEO PDF for 2024.pdf
Search Engine Optimization SEO PDF for 2024.pdfRankYa
 
Training state-of-the-art general text embedding
Training state-of-the-art general text embeddingTraining state-of-the-art general text embedding
Training state-of-the-art general text embeddingZilliz
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero
 
Story boards and shot lists for my a level piece
Story boards and shot lists for my a level pieceStory boards and shot lists for my a level piece
Story boards and shot lists for my a level piececharlottematthew16
 
SAP Build Work Zone - Overview L2-L3.pptx
SAP Build Work Zone - Overview L2-L3.pptxSAP Build Work Zone - Overview L2-L3.pptx
SAP Build Work Zone - Overview L2-L3.pptxNavinnSomaal
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar
 
Install Stable Diffusion in windows machine
Install Stable Diffusion in windows machineInstall Stable Diffusion in windows machine
Install Stable Diffusion in windows machinePadma Pradeep
 

Recently uploaded (20)

Streamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupStreamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project Setup
 
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxE-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024
 
Artificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptxArtificial intelligence in cctv survelliance.pptx
Artificial intelligence in cctv survelliance.pptx
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 Presentation
 
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platforms
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache Maven
 
Unraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfUnraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdf
 
Vector Databases 101 - An introduction to the world of Vector Databases
Vector Databases 101 - An introduction to the world of Vector DatabasesVector Databases 101 - An introduction to the world of Vector Databases
Vector Databases 101 - An introduction to the world of Vector Databases
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024
 
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
 
Search Engine Optimization SEO PDF for 2024.pdf
Search Engine Optimization SEO PDF for 2024.pdfSearch Engine Optimization SEO PDF for 2024.pdf
Search Engine Optimization SEO PDF for 2024.pdf
 
Training state-of-the-art general text embedding
Training state-of-the-art general text embeddingTraining state-of-the-art general text embedding
Training state-of-the-art general text embedding
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024
 
Story boards and shot lists for my a level piece
Story boards and shot lists for my a level pieceStory boards and shot lists for my a level piece
Story boards and shot lists for my a level piece
 
SAP Build Work Zone - Overview L2-L3.pptx
SAP Build Work Zone - Overview L2-L3.pptxSAP Build Work Zone - Overview L2-L3.pptx
SAP Build Work Zone - Overview L2-L3.pptx
 
DMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special EditionDMCC Future of Trade Web3 - Special Edition
DMCC Future of Trade Web3 - Special Edition
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding Club
 
Install Stable Diffusion in windows machine
Install Stable Diffusion in windows machineInstall Stable Diffusion in windows machine
Install Stable Diffusion in windows machine
 

Achieving resilient and assured PNT in secure information networks

  • 1. Achieving resilient and assured PNT in secure information networks June 8, 2022 (9:15-9:35a) | JNC, San Diego, CA | Chuck Perry, Sync Business Development Manager NA, Oscilloquartz Resilient PNT mandate | Ideal PNT architecture | Best PNT practices for defense-in-depth security
  • 2. PNT* cyber threats are at an all-time high everywhere and are growing in sophistication *Positioning, Navigation & Timing | T enables P & N | aPNT+ (assured PNT) Pentagon Army Space Force Air Force Navy PNT assurance
  • 3. © 2022 ADVA. All rights reserved. 3 Driven by US Federal Executive Order 13905 and UK and Euro Commissions • PNT stands for Positioning, Navigation & Timing, and T is essential to enable P & N • Protect government/industry critical infrastructure against PNT disruptions from GPS jamming/spoofing and network timing cyberattacks • Deploy resilient, assured and self-survivable PNT systems with defense-in-depth capability • Target critical infrastructure under national security threats • Use published resilient PNT guidelines and standard in progress • DHS Resilient PNT Conformance Framework • NIST Cybersecurity Framework for PNT Profile • IEEE P1952 Resilient PNT for User Equipment Standard working group What is the resilient PNT? Power grids Finance Transportation Communications Data centers resiliency levels clock sources 1 2 3 N multisource 1 2 3 4 next-gen system
  • 4. © 2022 ADVA. All rights reserved. 4 Critical infrastructure under warfighting and homeland security threats If GPS is disrupted or compromised Finance Communications Power grids Transportation Data centers All supported by PNT cyber threats GPS
  • 5. © 2022 ADVA. All rights reserved. 5 What are the PNT cyberthreats and GNSS vulnerabilities? RARE Cyberattacks GPS/GNSS receiver Jamming RARE GPS/GNSS degradation causes Environmental GPS/GNSS ground segment errors Adjacent-band transmitters Spoofing External GPS/GNSS level Internal network level COMMON NTP PTP More frequent PNT cyber threats / / Network interference Client clock Boundary clock
  • 6. © 2022 ADVA. All rights reserved. 6 Networkwide Sync Mgmt WAN network packet LAN network Redundant timing architecture with a single GPS source Data comm Center 1 (DC 1) GM-A (GNSS NTP/PTP grandmaster time server) Data comm Center 2 (DC 2) PTP failover backup cross reference monitoring 1 2 3 GPS/GNSS GM-B PTP Client machine/server/VM running critical command and control applications PTP 4 NTP 4 4 Client software sync monitor PNT assurance Networkwide sync management
  • 7. © 2022 ADVA. All rights reserved. 7 WAN network packet LAN network “Zero-trust multisource backup” timing architecture DC 1 ePRTC* DC 2 PTP failover backup Cross reference monitoring 1 3 GM-B 2 PNT backup sources PNT assurance Cesium, NIST, WR, eLORAN, LEO, etc. National time standard like NIST *Enhanced Primary reference time clock (GM-A + backup sources) 1 Networkwide Sync Mgmt Networkwide sync management PTP Client machine/server/VM running critical command and control applications PTP 5 NTP 5 5 Client software sync monitor 4
  • 8. © 2022 ADVA. All rights reserved. 8 WAN network packet LAN network “Zero-trust multi-source backup” timing architecture DC 1 ePRTC* DC 2 PTP failover backup Cross reference monitoring 1 3 GM-B 2 PNT backup sources PNT assurance Cesium, NIST, WR, eLORAN, LEO, etc. National time standard like NIST *Enhanced primary reference time clock (GM-A + backup sources) 1 Networkwide Sync Mgmt Networkwide sync management PTP Client machine/server/VM running critical command and control applications PTP 5 NTP 5 5 Client software sync monitor 4 Worst case scenario: GPS sats shot down
  • 9. © 2022 ADVA. All rights reserved. 9 PPS/PPS+ToD 10MHz BITS SyncE PTP How ePRTC cesium backup timing works GNSS MB receiver Time/phase holdover if GPS/GNSS goes down ePRTC+ solution: 100ns over 100 days Anti-jam antenna 14 days coreSync Optical cesium atomic clock Multi-source clock combiner Grandmaster clock Next-Gen Optical Cesium clock GPS Time error 100ns 30ns edgeSync grandmaster ePRTC+ solution (functional diagram) ✓ Other sources GPS GPS + combiner integrated into the grandmaster
  • 10. © 2022 ADVA. All rights reserved. 10 Secure network-wide sync management Neural AI/ML intelligence for self-survivability, end-to-end control, visibility, resilient and assured PNT Geolocation DCs 1 and 2 alert PTP backup assurance to DC 2 Timing chain alert with ePRTC/ PTP backup rearrangements DC 1 GM-A alert with ePRTC/PTP backup to DC 2 Timing topology with ePRTC/PTP backup Vendor-agnostic GNSS analytics/assurance PTP backup ePRTC backup DC 2 DC 1 DC 2 DC 1 DC 2 DC 1 DC 2 PTP backup ePRTC backup DC 1 DC 2 8 6 5 3 2 1 DC 2 GM-B alert with PTP backup from DC 1 ePRTC 4 Client sync monitor 7 Interoperability with other command and control systems API Open interface 9 Networkwide Sync Mgmt Networkwide sync management 9 • Secure communications • MIL 5G PNT systems (land, air, sea) • Command and control centers • Radar event tagging system • SATCOM ground stations • SATCOM network operations centers
  • 11. Thank you IMPORTANT NOTICE ADVA is the exclusive owner or licensee of the content, material, and information in this presentation. Any reproduction, publication or reprint, in whole or in part, is strictly prohibited. The information in this presentation may not be accurate, complete or up to date, and is provided without warranties or representations of any kind, either express or implied. ADVA shall not be responsible for and disclaims any liability for any loss or damages, including without limitation, direct, indirect, incidental, consequential and special damages, alleged to have been caused by or in connection with using and/or relying on the information contained in this presentation. Copyright © for the entire content of this presentation: ADVA. info@adva.com