Abstract
As global demand for efficient network services increases, the limitations of traditional terrestrial wireless networks are becoming more apparent. Space-air-ground integrated networks (SAGIN) have emerged as a promising solution to advance next-generation network infrastructure. However, SAGIN faces significant security challenges—including the lack of a robust security architecture, trust and data reliability issues in multi-hop transmissions, and the need to enhance network performance without compromising security—rendering traditional boundary-based defenses inadequate. Therefore, we propose SECURELINK, a decentralized zero-trust architecture tailored for SAGIN, which replaces traditional perimeter defenses with a ”never trust, always verify” approach. This approach strengthens network security and flexibility through continuous verification and adherence to the principle of least privilege. SECURELINK integrates blockchain technology to establish a multi-layered security verification and data processing scheme, addressing the dynamic and decentralized features of SAGIN. Additionally, we introduce DFRIO, a zero-trust traffic offloading method based on decentralized federated reinforcement learning and blockchain, designed to enhance network performance within maintaining security. Simulation results demonstrate that our solution significantly enhances SAGIN’s defense capability without compromising network stability, outperforming the two baseline schemes by 18.3% and 42.6%, respectively.
Funding Information
  • National Natural Science Foundation of China (62302527)
  • National Natural Science Foundation of China

This publication has 47 references indexed in Scilit: