Abstract EN:

Multicast communications allow a network source to efficiently send data to multiple destinations. Satellite networks provide some particular benefits for such communications. Applications intended for multicast communications strongly need security solutions in terms of confidentiality, authentication and availability. Many solutions were proposed in order to deal with these crucial problems. These solutions yet remain to be implemented because they still are severely lacking with respect to real-life requirements such as reliability and customer satisfaction. The goal of this thesis is to study and provide reliable secure solutions that take into account customers' expectations. The thesis is divided in two themes that are relevant for satellite networks: multicast confidentiality and denial of service prevention. In the first part of the thesis, we study the problem of multicast confidentiality, analyze existing solutions and highlight their neglected aspects in terms of reliability and customer expectations. We further suggest a new approach whereby the service provider partitions recipients with respect to some criteria, defines a set of privileged members and offers them a better service. In the second part of the thesis, we deal with denial of service attacks aiming at preventing legitimate recipients from accessing the service they are authorized to access in normal circumstances. We review existing solutions and show the limitations of their implementation in satellite networks. We then come up with an original solution that provides to the source the advantage of quickly identifying bogus attacks thus limiting the impact of such attacks on legitimate recipients.