Avinash Srinivasan | Search arXiv

arXiv2026

SDN-Orchestrated Dual-Path 5G/SATCOM Maritime Communications for Carrier Strike Groups

Carrier Strike Group (CSG) communications must sustain mission traffic across heterogeneous links whose quality varies with distance, weather, fading, and intermittent outages. We present an integrated Software-Defined Networking (SDN)/Software-Defined Radio (SDR) framework that unifies 5G and satellite communications (SATCOM) under a single control plane for dual-path failover in CSG communications. The framework is evaluated via stochastic simulation across four operational regions: Norfolk, the Norwegian Sea, the Philippine Sea, and the North Pacific storm track. The framework couples a centralized SDN controller with a Rician-faded 5G channel under Adaptive Modulation and Coding (AMC), a Ku-band SATCOM channel with ITU-R P.618/P.838 rain attenuation, and Gilbert-Elliott burst-availability processes on both links. The controller routes each packet by traffic class and current link state. Experiments use 60 independent trials of 50,000 packets per parameter setting with common random numbers, paired confidence intervals, and convergence diagnostics across fault, fading, and region sweeps. For the Norfolk weather baseline, SDN routing reaches 93.09% reliability versus 36.22% (5G-only) and 89.87% (SATCOM-only), with paired gains of +56.87 and +3.22 percentage points. The advantage grows under joint low-Rician-K/high-burst-fault stress, and AMC improves 5G robustness as Signal-to-Interference-plus-Noise Ratio degrades. SDN remains the highest-reliability mode across all four regions, indicating that cross-layer SDN-controlled failover improves maritime resilience without relying on deterministic link abstractions.

cs.NI↗

arXiv2026

CUSTOS: Toward Forensic-Ready Zero Trust at the Capture-Containment Boundary

Zero Trust (ZT) replaces implicit trust with continuous verification, but automated containment can destroy volatile evidence before preservation. We propose CUSTOS, a forensic-ready ZT reference architecture whose Forensic Management Point (FMP) links identity and policy context to tiered, rate-limited capture and orders volatile-state acquisition ahead of defender-routed destructive containment. In a controlled real-container experiment, the planted artifact was lost in all 1000 trials when capture and SIGKILL began concurrently, showing that the direct kill outran the evaluated acquisition path. The sequencing barrier completed capture before releasing that same kill in all 1000 trials. In a matched four-condition comparison, only sequencing recovered the transient artifact (200/200); a periodic snapshot-chain baseline recovered long-lived evidence (200/200) but missed the transient artifact at both cadences. Sequencing added 0.140 s of containment delay and 9.99 MB per event. At a 2 s cadence, the chain added no containment delay but suspended the workload for 4.9% of wall-clock and accrued 59.2 KB/s after its root snapshot. The always-on decision record reduced in-process request-path throughput by 1.9-3.0%. In-kernel enforcement and adversarial self-destruction bypass the sequencing barrier; CUSTOS preserves volatile state otherwise lost to defender-routed containment at measured cost.

cs.CR↗