NFV-based network protection: The SHIELD approach

Lioy, Antonio; Gardikis, Georgios; Gastón, Bernat; Jacquin, Ludovic; Benedictis, Marco De; Angelopoulos, Y.; Xylouris, C.

doi:10.1109/nfv-sdn.2017.8169869

Cited by 8 publications

(1 citation statement)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Beyond the analysis of network traffic, there are also authors that consider logs for the configuration of firewall rules [25]. It is important to note that SHIELD [26] also exploits NFV for adaptive monitoring of an IT infrastructure and for feeding the data to an analytics engine to detect attacks in real time. One of the key novelties of the ASTRID project in contrast to SHIELD is the use of eBPF modules.…”

Section: Related Workmentioning

confidence: 99%

Automating Mitigation of Amplification Attacks in NFV Services

Repetto

Bruno

Yusupov

et al. 2022

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

The combination of virtualization techniques with capillary computing and storage resources allows the instantiation of Virtual Network Functions throughout the network infrastructure, which brings more agility in the development and operation of network services. Beside forwarding and routing, this can be also used for additional functions, e.g., for security purposes. In this paper, we present a framework to systematically create security analytics for virtualized network services, specifically targeting the detection of cyber-attacks. Our framework largely automates the deployment of security sidecars into existing service templates and their interconnection to an external analytics platform. Notably, it leverages code augmentation techniques to dynamically inject and remove inspection probes without affecting service operation. We describe the implementation of a use case for the detection of DNS amplification attacks in virtualized 5G networks, and provide extensive evaluation of our innovative inspection and detection mechanisms. Our results demonstrate better efficiency with respect to existing network monitoring tools in terms of CPU usage, as well as good accuracy in detecting attacks even with variable traffic patterns.

show abstract

Section: Related Workmentioning

confidence: 99%

Automating Mitigation of Amplification Attacks in NFV Services

Repetto

Bruno

Yusupov

et al. 2022

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

show abstract

Research on Implementation Scheme of Power IMS Network Based on NFV Architecture

Huang

Meng

et al. 2019

Simulation Tools and Techniques

View full text Add to dashboard Cite

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

et al. 2022

View full text Add to dashboard Cite

Software-Defined networking (SDN) is a networking paradigm to enable dynamic, flexible, and programmatically efficient configuration of networks to revolutionize network control and management via separation of the control plane and data plane. The SDN technology has evolved in response to the demands from large data centers toward all types of networks, from IoT, enterprise, to ISP networks. On the one hand, SDN has provided solutions for high-demand resources, managing unpredictable data traffic patterns, and rapid network reconfiguration. It is further used to enhance network virtualization and security. On the other hand, SDN is still subject to many traditional network security threats. It also introduces new security vulnerabilities, primarily due to its logically centralized control plane infrastructure and functions. In this paper, we conduct a comprehensive survey on the core functionality of SDN from the perspective of secure communication infrastructure at different scales. A specific focus is put forward to address the challenges in securing SDN-based communications, with efforts taken up to address them. We further categorize the appropriate solutions for specific threats at each layer of SDN infrastructures. Lastly, security implications and future research trends are highlighted to provide insights for future research.INDEX TERMS Software defined networks, OpenFlow, security, threat, attack, vulnerability, network security.• Discussion of the future research directions and open challenges hindering resiliency and security in SDNenabled systems. Different from existing papers, this paper provides an up-to-date discussion about security issues in SDN environments. The presented taxonomy covers security threats ranging from topology discovery, network and app manipulation, flow diversion, teleportation & rootkits, controller placement, access control and authorization, to conventional networking threats. Further, in addition to reviewing existing security solutions and related implications, this paper provides key use cases of SDN technology implementation in smart communication systems. This layout is aimed to enable researchers to focus on the challenges that breach security in SDN communications. Ultimately, this work will provide further insights for future research in the SDN security domain.

show abstract

NFV-based network protection: The SHIELD approach

Cited by 8 publications

References 2 publications

Automating Mitigation of Amplification Attacks in NFV Services

Automating Mitigation of Amplification Attacks in NFV Services

Research on Implementation Scheme of Power IMS Network Based on NFV Architecture

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

Contact Info

Product

Resources

About