Approach to creation model of software-oriented communication network of the State Border Guard Service of Ukraine.

Abstract

Enhancing the level of information resource protection of the State Border Guard Service of Ukraine, as a component of Ukraine's defense forces, is an important task, especially in times of war. An effective and reliable corporate network of the border agency becomes a key component for ensuring security, coordination, and responsiveness to both internal and external threats. One aspect of developing the information space is the development of the transport network of the State Border Guard Service. Analysis of existing technologies, identifying their advantages and disadvantages, allowed for the identification of Software-Defined Wide Area Networking technology as the one that best meets the conformity criteria defined by the experts of the Communication and Information Systems Management. This technology not only allows for optimizing network traffic and ensuring high-speed data transmission but also guarantees flexibility in network management and enhances security. For the State Border Guard Service, responsible for the security of the country's borders, the use of advanced Software-Defined Wide Area Networking technologies can be crucial for optimizing operations and ensuring the highest level of information security. The article focuses on developing a conceptual model for building the corporate network of the State Border Guard Service based on Software-Defined Wide Area Networking technology. The main goal of the research is to consider the possibility of implementing this technology in the context of its application by Ukraine's defense forces and to analyze its advantages and disadvantages. The research task was to study the technical aspects of implementing Software-Defined Wide Area Networking, namely: configuration of network devices, traffic management, security monitoring, and data protection. Cisco's Software-Defined Wide Area Networking has applied an optimal approach to network architecture, which separates the control plane from the data plane of all peripheral routers and implements all control functions in a centralized software controller called vSmart. Practical recommendations from the research allowed for ensuring continuous network service by rerouting around failures and potential causes of downtime.