State of the Art and Research Challenges in the Security Technologies of Network Function Virtualization

Wu, Xiaochun; Hou, Kaiyu; Leng, Xue; Li, Xing; Yu, Yinbo; Wu, Bo; Chen, Yan

doi:10.1109/mic.2019.2956712

Cited by 11 publications

(7 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…To offer security services, the underlying system architecture should be robust and secure as much as possible. In a recent survey on SDN-NFV security [ 14 ], authors conclude that at least three central issues and potential research areas are: The performance impact of enhancing security in SDN-NFV networks, the importance of detecting abnormal behavior within the layers by monitoring, the security issues related to OpenStack. …”

Section: Developments In the Edge Continuum: Automation Security Sd-w...mentioning

confidence: 99%

Technological Transformation of Telco Operators towards Seamless IoT Edge-Cloud Continuum

Öztoprak

Tuncel

Bütün

2023

Sensors

View full text Add to dashboard Cite

This article investigates and discusses challenges in the telecommunication field from multiple perspectives, both academic and industry sides are catered for, surveying the main points of technological transformation toward edge-cloud continuum from the view of a telco operator to show the complete picture, including the evolution of cloud-native computing, Software-Defined Networking (SDN), and network automation platforms. The cultural shift in software development and management with DevOps enabled the development of significant technologies in the telecommunication world, including network equipment, application development, and system orchestration. The effect of the aforementioned cultural shift to the application area, especially from the IoT point of view, is investigated. The enormous change in service diversity and delivery capabilities to mass devices are also discussed. During the last two decades, desktop and server virtualization has played an active role in the Information Technology (IT) world. With the use of OpenFlow, SDN, and Network Functions Virtualization (NFV), the network revolution has got underway. The shift from monolithic application development and deployment to micro-services changed the whole picture. On the other hand, the data centers evolved in several generations where the control plane cannot cope with all the networks without an intelligent decision-making process, benefiting from the AI/ML techniques. AI also enables operators to forecast demand more accurately, anticipate network load, and adjust capacity and throughput automatically. Going one step further, zero-touch networking and service management (ZSM) is proposed to get high-level human intents to generate a low-level configuration for network elements with validated results, minimizing the ratio of faults caused by human intervention. Harmonizing all signs of progress in different communication technologies enabled the use of edge computing successfully. Low-powered (from both energy and processing perspectives) IoT networks have disrupted the customer and end-point demands within the sector, as such paved the path towards devising the edge computing concept, which finalized the whole picture of the edge-cloud continuum.

show abstract

Section: Developments In the Edge Continuum: Automation Security Sd-w...mentioning

confidence: 99%

Technological Transformation of Telco Operators towards Seamless IoT Edge-Cloud Continuum

Öztoprak

Tuncel

Bütün

2023

Sensors

View full text Add to dashboard Cite

show abstract

“…Their paper also compares defense approaches in IoT environments to conventional security countermeasures. Wu et al [ 48 ] analyze the state of security for NFV and propose security practices for an NFV-based management and control ecosystem; they also identify ongoing research challenges and open security issues for NFV.…”

Section: Related Workmentioning

confidence: 99%

“…The surveys in [ 7 , 46 , 47 , 48 ] are very recent (2018–2021) and very comprehensive; they can be used to put our work in perspective. [ 7 ] mentions some of our work and indicates that our misuse patterns are the first ones for NFV.…”

Section: Related Workmentioning

confidence: 99%

Towards a Security Reference Architecture for NFV

Alnaim

Alwakeel

Fernández

2022

Sensors

View full text Add to dashboard Cite

Network function virtualization (NFV) is an emerging technology that is becoming increasingly important due to its many advantages. NFV transforms legacy hardware-based network infrastructure into software-based virtualized networks. This transformation increases the flexibility and scalability of networks, at the same time reducing the time for the creation of new networks. However, the attack surface of the network increases, which requires the definition of a clear map of where attacks may happen. ETSI standards precisely define many security aspects of this architecture, but these publications are very long and provide many details which are not of interest to software architects. We start by conducting threat analysis of some of the NFV use cases. The use cases serve as scenarios where the threats to the architecture can be enumerated. Representing threats as misuse cases that describe the modus operandi of attackers, we can find countermeasures to them in the form of security patterns, and we can build a security reference architecture (SRA). Until now, only imprecise models of NFV architectures existed; by making them more detailed and precise it is possible to handle not only security but also safety and reliability, although we do not explore those aspects. Because security is a global property that requires a holistic approach, we strongly believe that architectural models are fundamental to produce secure networks and allow us to build networks which are secure by design. The resulting SRA defines a roadmap to implement secure concrete architectures.

show abstract

“…Fonte: Adaptado de ETSI (2013b). Devido a agilidade, velocidade na entrega de serviços, e custos, a virtualização de funções de rede tornou-se componente fundamental no bloco estrutural de novas arquiteturas de rede (Wu et al, 2019). Agregada a essas capacidades, o conceito de compartilhamento de recursos de rede, no formato como se construiu o compartilhamento de recursos para máquinas virtuais, ganhou forma e traz consigo potencialidades que podem ser utilizadas para lidar com os desafios de fatiamento de redes e orientação a serviços.…”

Section: Virtualização De Funções De Redeunclassified

“…Para endereçar a primeira premissa, escolheu-se o método de aprendizado de máquina supervisionado: redes neurais convolucionais. Esse tipo de classificador é especializado em classificação de imagens, sendo assim amplamente utilizado em contextos de classificação de imagens médicas (ZHOU et al, 2021;SHEN;WU;SUK, 2017). Todavia, para se apropriar das capacidades de acurácia e desempenho que essa tecnologia oferece, foi proposto o método Packet Vision que transforma um pacote de rede em uma imagem.…”

Section: )unclassified

Uma Abordagem de Fatiamento de Rede entre Múltiplos Sistemas Autônomos

Moreira¹

View full text Add to dashboard Cite

Esta tese é sobre um método de fatiamento de rede entre múltiplos Sistemas Autônomos. Eu acredito que ela é também sobre transformação. Perseguir o título Ph. D. é se transformar. A transformação profissional e pessoal são as conquistas mais significativas de todo o processo; e elas não se estabelecem somente na busca e realização dos meios de responder a um hipótese científica, elas requerem circunstâncias e pessoas que merecem apreciação e gratidão.Primeiramente, agradeço a Deus, Autor da Vida, por ter me criado a sua imagem e semelhança com a capacidade de pensar, criar e avaliar.Agradeço aos meus pais Donizete e Cláudia; e aos meus irmãos Thiago e Donizete-Jr pelo incentivo e amor incondicional.Agradeço a Larissa pelo incentivo, apoio e pela compreensão nos diversos momentos dessa etapa.Agradeço o professor e amigo Flávio de Oliveira Silva da Universidade Federal de Uberlândia por ter sido, durante toda a Pós-graduação, um agente de transformação profissional e pessoal. Gratidão pela oportunidade, orientação, suporte, conversas e ensinamentos.Agradeço o professor Rui Aguiar do Instituto de Telecomunicações da Universidade de Aveiro pela valiosa coorientação nesta pesquisa.Agradecimentos ao professor e amigo Pedro Frosi da Universidade Federal de Uberlândia pela ajuda, humanidade, conversas e direcionamentos ao longo da Pósgraduação.Gratidão aos professores do Programa de Pós-Graduação em Ciência da Computação da Universidade Federal de Uberlândia, em especial àqueles que me honraram com seus ensinamentos, professores:

show abstract

State of the Art and Research Challenges in the Security Technologies of Network Function Virtualization

Cited by 11 publications

References 10 publications

Technological Transformation of Telco Operators towards Seamless IoT Edge-Cloud Continuum

Technological Transformation of Telco Operators towards Seamless IoT Edge-Cloud Continuum

Towards a Security Reference Architecture for NFV

Uma Abordagem de Fatiamento de Rede entre Múltiplos Sistemas Autônomos

Contact Info

Product

Resources

About