Cloud & Edge Trusted Virtualized Infrastructure Manager (VIM) - Security and Trust in OpenStack

Abstract

The Fifth Generation (5G) mobile networks promise faster connectivity and futuristic applications and services. In order to meet the high expectations, 5G joins forces with virtualization technologies like Network Functions Virtualization (NFV) and adopts cloud-native solutions. At the same time, it relies on shifting the computation to the network edge for offloading computing power, local caching, minimized latency and flexibility in the deployment. However, new opportunities unlock new security challenges. Man-in-the-middle, denial-ofservice attacks and tampering are now becoming easier because of the scattered devices and their varying locations. Meanwhile, the dynamic nature of the cloud raises the need for on-time threats prevention.In this work, we propose a way to answer the new challenges by bringing trust into the virtualized edge infrastructure. We present our contributions to the development of security services for platform authentication and integrity, hosted inside a trusted execution environment (TEE). We also evaluate the performance overhead of our work and suggest future improvements.

EVEREST: A design environment for extreme-scale big data analytics on heterogeneous platforms

“…virtualization techniques will abstract hardware characteristics of the heterogeneous target nodes to present an integrated execution environment for the applications. As described in Section V, the nodes may feature different CPUs (i.e., x86 in the cloud and ARM/RISC-V in the edge [32]) and accelerators (e.g., GPUs and FPGAs [33]). Fig.…”

On Credibility-Based Service Function Chain Deployment

“…α ∈ [0, 1] represents the probability that a VNF is safe at startup, which depends on the certificate of faith of every software. Unless checked from the startup, we can no longer assure authenticity from the root [34]. Secure boot is the first line of protection and lays the groundwork for subsequent security assessments.…”

“…The internal integrity test mainly checks the presence of hazard code, vulnerabilities, injected unfamiliar information, and the presence of malware in VNF. For instance, [34] proposed an internal integrity test by monitoring whether the operating system kernel has been modified.…”