NFV security survey in 5G networks: A three-dimensional threat taxonomy

Madi, Taous; Alameddine, Hyame Assem; Pourzandi, Makan; Boukhtouta, Amine

doi:10.1016/j.comnet.2021.108288

Cited by 42 publications

(15 citation statements)

References 51 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The most recent survey considers NFV use in 5G [ 7 , 49 ]; it explores the complexity of the 5G ecosystem for which it derives a 5G telecommunication business model, which is used to identify new aspects of its attack surface and enumerates security threats introduced by the multiple business collaborations supported by NFV. That paper proposes a three-dimensional threat taxonomy for NFV-based 5G networks relating NFV architecture to deployment use cases for different 5G business collaboration scenarios.…”

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

“…The surveys in [ 7 , 46 , 47 , 48 ] are very recent (2018–2021) and very comprehensive; they can be used to put our work in perspective. [ 7 ] mentions some of our work and indicates that our misuse patterns are the first ones for NFV. Also based on these surveys and reading some papers we could see that none of the other works present misuse patterns or precise models of the architecture; they just use the block diagrams of the ETSI publications.…”

Section: Related Workmentioning

confidence: 99%

“…Another important technology, often used to implement NFV, is SDN. Security in 5G and SDN has been studied in several works [ 5 , 6 , 7 ]; NFV requires the support of cloud computing, and its threats have been studied in many publications. We concentrate here only on modeling some of the security aspects of NFV.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Towards a Security Reference Architecture for NFV

Alnaim

Alwakeel

Fernández

2022

Sensors

View full text Add to dashboard Cite

Network function virtualization (NFV) is an emerging technology that is becoming increasingly important due to its many advantages. NFV transforms legacy hardware-based network infrastructure into software-based virtualized networks. This transformation increases the flexibility and scalability of networks, at the same time reducing the time for the creation of new networks. However, the attack surface of the network increases, which requires the definition of a clear map of where attacks may happen. ETSI standards precisely define many security aspects of this architecture, but these publications are very long and provide many details which are not of interest to software architects. We start by conducting threat analysis of some of the NFV use cases. The use cases serve as scenarios where the threats to the architecture can be enumerated. Representing threats as misuse cases that describe the modus operandi of attackers, we can find countermeasures to them in the form of security patterns, and we can build a security reference architecture (SRA). Until now, only imprecise models of NFV architectures existed; by making them more detailed and precise it is possible to handle not only security but also safety and reliability, although we do not explore those aspects. Because security is a global property that requires a holistic approach, we strongly believe that architectural models are fundamental to produce secure networks and allow us to build networks which are secure by design. The resulting SRA defines a roadmap to implement secure concrete architectures.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Towards a Security Reference Architecture for NFV

Alnaim

Alwakeel

Fernández

2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Novel software-originated vulnerabilities can be specific to hypervisor, VNF application, SDN controller and SDN south-bound and northbound protocol subsystems. For example authors in [13] produce a taxonomy of the possible security threats and attacks that can affect an NFV system. Similarly, in [14] authors propose another layer-specific threat taxonomy from which they build a set of recommendations on securing NFV based services.…”

Section: Background and Related Workmentioning

confidence: 99%

An AI-Empowered Framework for Cross-Layer Softwarized Infrastructure State Assessment

Diamanti

Vílchez

Secci

2022

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Network softwarization technologies challenge legacy fault management systems. Coordination and dependency among different novel software components for orchestration, switching, virtual machine and container management creates novel monitoring points, besides novel sources of faults, bugs and vulnerabilities. To cope with the high heterogeneity and granularity of software components, we propose a modular network AI framework to detect anomalies, toward closed-loop automation. We design an AI-empowered anomaly detection framework able to assess the running state and the state deviations of a softwarized infrastructure, monitored through different features grouped depending on their layer and connectcompute stack component. Our framework learns the nominal working conditions of the infrastructure, with respect to which anomalies are detected, and characterized tracing back the layer and component root cause; it includes a network state assessment technique that leverages anomalies characterization through their most visible symptoms. We implement and validate the proposed framework through experimental tests on a containerized IP Multimedia Subsystem platform.

show abstract

Impacts of blockchain in software‐defined Internet of Things ecosystem with Network Function Virtualization for smart applications: Present perspectives and future directions

Rahman

Islam

Kundu

et al. 2023

Int J Communication

View full text Add to dashboard Cite

SummaryAs an emerging technology, blockchain (BC) has been playing a promising role in today's software‐defined networking (SDN)‐enabled Internet of Things (IoT) applications. Because of the salient feature of the network function virtualization (NFV) techniques, SDN can ensure an IoT system runs efficiently and smoothly in a cloud‐driven ecosystem. When cloud‐enabled systems encounter immense security and operational challenges caused mainly by third‐party dependency, large‐scale data communication, and maintenance, BC offers effective and robust data transfer solutions without incorporating intermediaries over the distributed network. With the increased SDN‐BC convergence in the IoT domain, the underlying challenges and perspectives deserve proper attention methodically and structurally. From the motivation of addressing such issues, this study provides necessary insights to combine those for successful plug‐and‐play. Therefore, the study includes purposefully investigating current state‐of‐the‐art to extract the research trends, future directions, and perspectives in this domain. This study provides a comprehensive survey of IoT, SDN, NFV, and BC‐enabled emerging technologies. More importantly, the authors intelligently integrated the four different technologies—IoT, SDN, BC, and NFV based on characteristics, scopes, challenges, taxonomies, and tables in numerous areas. Initially, the authors introduce the SDN‐IoT ecosystem in brief and address the features and applications. We took a close look at the SDN's overall taxonomy based on security, environment, scopes, and challenges. We also briefly describe the integration of SDN‐IoT with the NFV ecosystems. Moreover, we review the prospect of BC technology from security perspectives, its extent, challenges of practical implementation, and the possible integration of IoT regarding smart applications. Finally, this study highlights several future directions based on these technologies.

show abstract

NFV security survey in 5G networks: A three-dimensional threat taxonomy

Cited by 42 publications

References 51 publications

Towards a Security Reference Architecture for NFV

Towards a Security Reference Architecture for NFV

An AI-Empowered Framework for Cross-Layer Softwarized Infrastructure State Assessment

Impacts of blockchain in software‐defined Internet of Things ecosystem with Network Function Virtualization for smart applications: Present perspectives and future directions

Contact Info

Product

Resources

About