检索结果-内蒙古大学图书馆

Detection and mitigation of link flooding-based DDoS attacks on a software defined network using network function virtualisation

引用

INTERNATIONAL JOURNAL OF COMMUNICATION networkS AND DISTRIBUTED SYSTEMS 2024年第2期30卷 202-226页

作者： Murtuza, Shariq Asawa, Krishna Jaypee Inst Informat Technol Dept Comp Sci & Engn & Informat Technol Noida India

Software defined networks (SDNs) are emerging as the first choice for network administrators due to their agility, modularity and dynamism. network operators can change the network topology, routes and other parameters as per their current requirement. Like traditional computer networks SDNs are also prone to various denial of service attacks (DDoS). Link flooding attacks are a class of DDoS attack that aims to choke crucial network connections and can fully detach the victim from the network. In this paper we have discussed two link flooding-based denial of service attacks, namely Coremelt and Crossfire, in the context of SDN along with the possible mitigation. These attacks are aimed at disconnecting services from the network. We demonstrate the usage of network function virtualisation along with SDN features to mitigate these attacks by recreating replicas of the services under attack and connecting them to the network.

关键词： software defined networks SDNs network function virtualisation NFV denial of service attacks DDoS virtual network functions VNFs

来源：评论

学校读者我要写书评

暂无评论

iMon: network function virtualisation Monitoring Based on a Unique Agent

引用

IEICE TRANSACTIONS ON COMMUNICATIONS 2023年第3期E106B卷 230-240页

作者： Zhou, Cong Tao, Jing Wang, Baosheng Zhao, Na Natl Univ Def Technol Fac Dept Comp Changsha Peoples R China

As a key technology of 5G, NFV has attracted much at -tention. In addition, monitoring plays an important role, and can be widely used for virtual network function placement and resource optimisation. The existing monitoring methods focus on the monitoring load without consid-er ing they own resources needed. This raises a unique challenge: jointly optimising the NFV monitoring systems and minimising their monitoring load at runtime. The objective is to enhance the gain in real-time monitoring metrics at minimum monitoring costs. In this context, we propose a novel NFV monitoring solution, namely, iMon (Monitoring by inferring), that jointly optimises the monitoring process and reduces resource consump-tion. We formalise the monitoring process into a multitarget regression problem and propose three regression models. These models are imple-mented by a deep neural network, and an experimental platform is built to prove their availability and effectiveness. Finally, experiments also show that monitoring resource requirements are reduced, and the monitoring load is just 0.6% of that of the monitoring tool cAdvisor on our dataset.

关键词： network function virtualisation inference monitoring multi-target regression

来源：评论

学校读者我要写书评

暂无评论

Towards a secure and lightweight network function virtualisation environment

引用

INTERNATIONAL JOURNAL OF GRID AND UTILITY COMPUTING 2020年第2期11卷 243-252页

作者： Benedictis, Marco De Lioy, Antonio Smiraglia, Paolo Politecn Torino Dip Automat & Informat Corso Duca Abruzzi 24 I-10129 Turin Italy Via Barletta 92 I-10136 Turin Italy

Cloud computing has deeply affected the structure of modern ICT infrastructures. It represents an enabling technology for novel paradigms such as network function virtualisation (NFV), which proposes the virtualisation of network functions to enhance the flexibility of networks and to reduce the costs of infrastructure management. Besides potential benefits, NFV inherits the limitations of traditional virtualisation where the isolation of resources comes at the cost of a performance overhead. Lightweight forms of virtualisation, like containers, aim to mitigate this limitation. Furthermore, they allow the agile composition of complex services. These characteristics make containers a suitable technology for NFV environment. A major concern towards the exploitation of containers is security. Since containers provide less isolation than virtual machines, they can expose the whole host to vulnerabilities. In this work, we investigate container-related threats and propose a secure design for a Virtual network function deployed in a lightweight NFV environment.

关键词： security lightweight virtualisation container network function virtualisation NFV mandatory access control SELinux Docker

来源：评论

学校读者我要写书评

暂无评论

Software Defined networking and network function virtualisation cooperation - experiments 12

Software Defined Networking and Network Function Virtualisat...

引用

12th IEEE International Conference on Communications (COMM)

作者： Topoloi, Silviu-Gabriel Borcoci, Eugen Univ Politehn Bucuresti Bucharest Romania Univ Politehn Bucuresti Dept Telecommun Bucharest Romania

ISBN: (纸本)9781538623503

Software Defined networking (SDN) and network function virtualisation (NFV) represent two recent and complementary solutions of high interest in future networking. Traditional network technologies (using dedicated hardware-software entities) have many limitations related to low flexibility, low programmability and abstraction, vendor dependency, of the operators, difficulties in management, low-compatibility with cloud computing, etc. SDN and NFV bring novel and powerful capabilities by decoupling the Data Plane and Control Plane (SDN), and moving in software (NFV) a lot of functions, traditionally performed in dedicated hardware-software units. However, many open issues exist in both SDN and NFV and especially in their cooperation in integrated implementations. This paper develops a couple of experiments of an SDN environment and the usage of NFV to manage traffic flow. Given the novelty and complexity of the topics, this paper can serve also as a short guideline to help experimenters to begin development of a complex framework SDN-NFV.

关键词： Software network virtualisation network function virtualisation flow control traffic

来源：评论

学校读者我要写书评

暂无评论

Security in Lightweight network function virtualisation for Federated Cloud and IoT 5

Security in Lightweight Network Function Virtualisation for ...

引用

IEEE 5th International Conference on Future Internet of Things and Cloud (FiCloud)

作者： Massonet, Philippe Deru, Laurent Achour, Amel Dupont, Sebastien Croisez, Louis-Marie Levin, Anna Villari, Massimo CETIC Res Ctr B-6041 Charleroi Belgium IBM Res Lab Haifa Israel Univ Messina Dept Engn Messina Italy

ISBN: (纸本)9781538620748

Smart IoT applications require connecting multiple IoT devices and networks with multiple services running in fog and cloud computing platforms. One approach to connecting IoT devices with cloud and fog services is to create a federated virtual network. The main benefit of this approach is that IoT devices can then interact with multiple remote services using an application specific federated network where no traffic from other applications passes. This federated network spans multiple cloud platforms and IoT networks but it can be managed as a single entity. From the point of view of security, federated virtual networks can be managed centrally and be secured with a coherent global network security policy. This does not mean that the same security policy applies everywhere, but that the different security policies are specified in a single coherent security policy. In this paper we propose to extend a federated cloud networking security architecture so that it can secure IoT devices and networks. The federated network is extended to the edge of IoT networks by integrating a federation agent in an IoT gateway or network controller (Can bus, 6LowPan, Lora,...). This allows communication between the federated cloud network and the IoT network. The security architecture is based on the concepts of network function virtualisation (NFV) and service function chaining (SFC) for composing security services. The IoT network and devices can then be protected by security virtual network functions (VNF) running at the edge of the IoT network.

关键词： Cloud computing internet of things federation network function virtualisation security

来源：评论

学校读者我要写书评

暂无评论

Trends on virtualisation with software defined networking and network function virtualisation

引用

IET networkS 2015年第5期4卷 255-263页

作者： Barona Lopez, Lorena Isabel Valdivieso Caraguay, Angel Leonardo Garcia Villalba, Luis Javier Lopez, Diego Univ Complutense Madrid Fac Comp Sci Dept Software Engn & Artificial Intelligence GASSOff 431 Calle Profesor Jose Garcia Santesmases 9 E-28040 Madrid Spain Telefonica ID Madrid 28006 Spain

Software defined networking (SDN) and network function virtualisation (NFV) have become hot topics in recent years. On one hand, SDN decouples the control plane from the data plane allowing the rapid innovation and the introduction of new services in an easy way. On the other hand, currently proprietary appliances such as load balancers and firewalls are implemented in hardware, NFV aims to change these network functions to an open software environment using virtualisation and cloud technologies. This means a reduction of spends in the provisioning and management of telecom services. SDN and NFV are two different concepts but these can coexist and help each other. In this study, the authors present a survey of SDN and NFV focusing in virtualisation projects and the use cases where a synergy between these technologies is possible. This study includes the basic concepts of network virtualisation, NFV and SDN, current research and the relation between both technologies.

关键词： software defined networking virtualisation data communication cloud computing public domain software virtual private networks software defined networking network function virtualisation SDN NFV data plane open software environment cloud technologies

来源：评论

学校读者我要写书评

暂无评论

An Overview of Distributed Firewalls and Controllers Intended for Mobile Cloud Computing

引用

APPLIED SCIENCES-BASEL 2025年第4期15卷 1931-1931页

作者： Suetor, Cyril Godwin Scrimieri, Daniele Qureshi, Amna Awan, Irfan-Ullah Univ Bradford Sch Comp Sci AI & Elect Bradford BD7 1DP England

Mobile cloud computing (MCC) is a representation of the interaction between cloud computing and mobile devices, reshaping the utilisation of technology for consumers and businesses. This level of mobility and decentralisation of devices in MCC necessitates a highly secured framework to facilitate it. This literature review on distributed firewalls and controllers for mobile cloud computing reveals the critical need for a security framework tailored to the dynamic and decentralised nature of MCC. This study further emphasises the importance of integrating distributed firewalls with central controllers to address the unique security challenges in MCC, such as nomadic device behaviour and resource allocation optimisation. Additionally, it highlights the significance of Cloud Access Security Brokers (CASBs) in improving data security and ensuring compliance within mobile cloud applications. This review also addresses specific research questions related to security concerns, scalable framework development, and the effectiveness of distributed firewall and controller systems in MCC. It explores the complexities involved in merging Software-Defined networking (SDN), network function virtualisation (NFV), and CASB into a cohesive system, focusing on the need to resolve interoperability issues and maintain low latency and high throughput while balancing performance across distributed firewalls and controllers. The review also points to the necessity of privacy-preserving methods within CASB to uphold privacy standards in MCC. Furthermore, it identifies the integration of NFV and SDN as crucial for enhancing security and performance in MCC environments, and stresses the importance of future research directions, such as the incorporation of machine learning and edge computing, to further improve the security and efficiency of MCC systems. To the best of our knowledge, this review is the first to comprehensively examine the integration of these advanced technologies within the

关键词： cloud computing cloud access security brokers firewalls network function virtualisation software defined network security

来源：评论

学校读者我要写书评

暂无评论

Control Plane Performance Benchmarking and Feature Analysis of Popular Open-Source 5G Core networks: OpenAirInterface, Open5GS, and free5GC

引用

IEEE ACCESS 2024年 12卷 113336-113360页

作者： Mukute, Tariro Mamushiane, Lusani Lysko, Albert A. Modroiu, Elena-Ramona Magedanz, Thomas Mwangama, Joyce Univ Cape Town Dept Elect Engn ZA-7700 Cape Town South Africa CSIR ZA-0184 Pretoria South Africa Tech Univ Berlin Dept Next Generat Networks D-10587 Berlin Germany

This study examines the maturity and state of open-source 5G Core (5GC) networks, with a focus on their support of 5G procedures and network function (NF) operations. The research emphasises the importance of optimising the virtualised resource usage of 5GC control plane functions. Given the large set of NF operations and procedures defined for 5GC networks, the study presents a framework that correlates NF operations with 5G procedures, thus facilitating the assessment of 5GC implementations. Furthermore, the study introduces macro-benchmarking and micro-benchmarking approaches to assess the performance of 5GC control plane functions. Our 5G traffic generator is used to generate User Equipment (UE) registration traffic for benchmarking. Macro-benchmarking measures the time taken for a specific number of UEs to complete UE procedures. In contrast, micro-benchmarking analyses the system calls made by the 5GC, presenting their latency and frequency and the processes responsible for generating them. Our findings revealed a direct correlation between macro-level performance and micro-benchmarking results. This suggests that optimising micro-level implementations is crucial for enhancing overall system performance. Moreover, examining micro-benchmarking data can provide valuable insights into how the system's performance will scale under varying workloads. We use the correlation of benchmarking results to identify performance improvement points in each 5GC and to provide recommendations for software architectural changes that can optimise the usage of virtualised resources. The study includes artefacts and source code to enable replication of the work and results.

关键词： 5G 5G core networks BPF compiler collection tools (BCC Tools) free5GC Linux Kernel load testing network function virtualisation network traffic generator OAI OpenAirInterface Open5GS open source software performance benchmarking system calls network function virtualisation network traffic generator OAI OpenAirInterface Open5GS open source software performance benchmarking system calls

来源：评论

学校读者我要写书评

暂无评论

Techniques for Enhancing Security in Industrial Control Systems

引用

ACM TRANSACTIONS ON CYBER-PHYSICAL SYSTEMS 2024年第1期8卷 1-36页

作者： Varadharajan, Vijay Tupakula, Uday Karmakar, Kallol Krishna Univ Newcastle Adv Cyber Secur Engn Res Ctr EAG03dUniv Dr Callaghan NSW 2308 Australia Univ Newcastle Adv Cyber Secur Engn Res Ctr Callaghan NSW Australia Univ New England Elm Ave Armidale NSW 2351 Australia Univ Newcastle Adv Cyber Secur Engn Res Ctr ES231Univ Dr Callaghan NSW 2308 Australia

Increasingly Industrial Control Systems (ICS) systems are being connected to the Internet to minimise the operational costs and provide additional flexibility. These control systems such as the ones used in power grids, manufacturing and utilities operate continually and have long lifespans measured in decades rather than years as in the case of Information Technology (IT) systems. Such industrial control systems require uninterrupted and safe operation. However, they can be vulnerable to a variety of attacks, as successful attacks on critical control infrastructures could have devastating consequences to the safety of human lives as well as a nation's security and prosperity. Furthermore, there can be a range of attacks that can target ICS and it is not easy to secure these systems against all known attacks let alone unknown ones. In this paper, we propose a software enabled security architecture using Software Defined networking (SDN) and network function virtualisation (NFV) that can enhance the capability to secure industrial control systems. We have designed such an SDN/NFV enabled security architecture and developed a Control System Security Application (CSSA) in SDN Controller for enhancing security in ICS by achieving real time situational awareness and dynamic policy-driven decision making across the network infrastructure. In particular, CSSA can be used for establishing secure path for end-to-end communication between devices and also deal against certain specific attacks namely denial of service attacks, from unpatched vulnerable control system components and securing the communication flows from the legacy devices that do not support any security functionality. We also discuss how CSSA provides reliable paths for safety critical messages in control systems. We discuss the prototype implementation of the proposed architecture and the results obtained from our analysis.

关键词： Control system security software defined networking network function virtualisation security architecture security attacks

来源：评论

学校读者我要写书评

暂无评论

Multi-Objective Deep Reinforcement Learning Assisted Service function Chains Placement

引用

IEEE TRANSACTIONS ON network AND SERVICE MANAGEMENT 2021年第4期18卷 4134-4150页

作者： Bi, Yu Meixner, Carlos Colman Bunyakitanon, Monchai Vasilakos, Xenofon Nejabati, Reza Simeonidou, Dimitra Univ Bristol Fac Engn Sch Comp Sci Elect & Elect Engn & Engn Maths SCEE Smart Internet LabHigh Performance Networks Grp Bristol BS8 1QU Avon England

The study of Service function Chains (SFCs) placement problem is crucial to support services flexibly and use resources efficiently. Solutions should satisfy various Quality of Service requirements, avoid edge resource congestion, and improve service acceptance ratio (SAR). This work presents a novel approach to address these challenges by solving a multi-objective SFCs placement problem based on the Pointer network in multi-layer edge and cloud networks. We design a Deep Reinforcement Learning algorithm, called Chebyshev-assisted Actor-Critic SFCs Placement Algorithm, to overcome the limitations of traditional heuristic and evolutionary algorithms. Then, we run this algorithm iteratively with a set of weights to obtain non-dominated fronts, which have much higher hypervolume values than those obtained from other state-of-the-art algorithms. Moreover, running our algorithm individually with selected weights from non-dominated fronts can avoid edge resource congestion and achieve 98% SARs of low-latency services during high-workload periods. Finally, based on both simulation and real testbed experimental results, it is validated that the proposed algorithm fits for pragmatic service deployment while achieving 100% of SARs in the use cases deployed on the testbed.

关键词： Heuristic algorithms Cloud computing Quality of service Optimization Computational modeling Approximation algorithms Costs network function virtualisation service function chaining multi-objective deep reinforcement learning multi-access edge computing optical network

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：