检索结果-内蒙古大学图书馆

Security challenges with network functions virtualization

FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE 2017年 67卷 315-324页

作者： Firoozjaei, Mahdi Daghmehchi Jeong, Jaehoon (Paul) Jo, Hoon Kim, Hyoungshick Sungkyunkwan Univ Coll Informat & Commun Engn Dept Elect & Comp Engn Seoul South Korea Sungkyunkwan Univ Coll Informat & Commun Engn Dept Interact Sci Seoul South Korea

The advent of network functions virtualization (NFV) has revolutionized numerous network-based applications due to its several benefits such as flexibility, manageability, scalability, and security. By the software-based virtualization of network functions on a single infrastructure, NFV provides users with a framework that dynamically provisions various network services in a flexible manner. However, NFV faces several security challenges (e.g., multi-tenancy and live migration) which make it vulnerable to some cybersecurity attacks (e.g., side-channel attacks and shared resource misuse attacks). In this paper, we provide an overview of NFV, discuss potentially serious security threats on NFV and introduce effective countermeasures to mitigate those threats. Finally, we suggest some practical solutions to provide a trustworthy platform for NFV. (C) 2016 Elsevier B.V. All rights reserved.

关键词： network functions virtualization network security Virtualized network function Security threats

来源：评论

学校读者我要写书评

暂无评论

Dynamic Defense Provision via network functions virtualization

Dynamic Defense Provision via Network Functions Virtualizati...

引用

ACM International Workshop on Security in Software Defined networks and network Function virtualization (SDN-NFVSec)

作者： Park, Younghee Chandaliya, Pritesh Muralidharan, Akshaya Kumar, Nikash Hu, Hongxin San Jose State Univ San Jose CA 95192 USA Clemson Univ Clemson SC 29631 USA

ISBN: (纸本)9781450349086

network Function virtualization (NFV) is a critical part of a new defense paradigm providing high flexibility at a lower cost through software-based virtual instances. Despite the promise of the NFV, the original Intrusion Detection System (IDS) designed for NFV still draws heavily on processing power and requires significant CPU resources. In this paper, we provide a framework for dynamic defense provision by building in light intrusion detection network functions (NFs) over NFV. Without using the existing IDSes, our system constructs a light intrusion detection system by using a chain of network functions in NFV. The entire IDS is broken down into separate light network functions according to different protocols. The intrusion detection NFs cover various protocol stacks from the link layer to the application layer protocols. They also include different deep packet inspection NFs for different application layer protocols. The experimental results show the proposed system reduces resource consumption while performing valid intrusion detection functions.

关键词： network functions virtualization Software-Defined networks Security network attacks

来源：评论

学校读者我要写书评

暂无评论

A Survey on Security in network functions virtualization 2

A Survey on Security in Network Functions Virtualization

引用

2nd IEEE International Conference on network Softwarization (IEEE NetSoft)

作者： Yang, Wei Fung, Carol Virginia Commonwealth Univ Dept Comp Sci Richmond VA 23284 USA

ISBN: (纸本)9781467394864

network functions virtualization (NFV) is an emerging network technology. Instead of deploying hardware equipments for each network functions, virtualized network functions in NFV are realized through virtual machines (VMs) running various software on top of industry standard high volume servers or cloud computing infrastructure. NFV decreases hardware equipment costs and energy consumption, improves operational efficiency and optimizes network configuration. However, potential security issues is a major concern of NFV. In this paper, we survey the challenges and opportunities in NFV security. We describe the NFV architecture design and some potential NFV security issues and challenges. We also present existing NFV security solutions and products. We also survey NFV security use cases and explore promising research directions in this area.

关键词： network functions virtualization NFV security

来源：评论

学校读者我要写书评

暂无评论

Policy-Based Dynamic Service Chaining in network functions virtualization

Policy-Based Dynamic Service Chaining in Network Functions V...

引用

IEEE Symposium on Computers and Communication (ISCC)

作者： Scheid, Eder J. Machado, Cristian C. dos Santos, Ricardo L. Schaeffer-Filho, Alberto E. Granville, Lisandro Z. Univ Fed Rio Grande do Sul Inst Informat Porto Alegre RS Brazil

ISBN: (纸本)9781509006793

network functions virtualization (NFV) enables the rapid development, flexible management, and the dynamic placement of new, innovative Virtualized network functions (VNFs), such as load balancers, firewalls, and Intrusion Detection Systems (IDSes). Furthermore, NFV along with Software-Defined networking (SDN) allows VNFs and physical middleboxes to be dynamically composed into service chaining graphs. Despite these benefits, service chaining graphs can be further improved through the use of techniques that have not been satisfactorily explored yet, such as Policy-Based network Management (PBNM). In PBNM, policies can be written and triggered during runtime, thus supporting the dynamic (re) configuration of service graphs with minimal disruption. In this paper, we propose an approach to automatically design NFV service chaining graphs based on policies. These policies rule the forwarding of traffic and the construction of service chaining graphs. In our approach, service chaining graphs are enforced dynamically in the network during runtime. Finally, to assess its feasibility and generality, we create two different scenarios to demonstrate and discuss how our solution can be employed and its expected results.

关键词： Policy-based network Management network functions virtualization Service Chaining

来源：评论

学校读者我要写书评

暂无评论

On Telecommunication Architectures: from Intelligent network to network functions virtualization 8

On Telecommunication Architectures: from Intelligent Network...

引用

8th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT)

作者： Sneps-Sneppe, Manfred Namiot, Dmitry Ventspils Univ Coll Ventspils Int Radioastron Ctr Ventspils Latvia Lomonosov Moscow State Univ Fac Computat Math & Cybernet Moscow Russia

ISBN: (纸本)9781467388184

The paper discusses the undergoing network architecture massive transformation, primarily by virtualization and Software Defined network (SDN) technologies. network functions virtualization consolidates many network equipment types onto industry standard high volume servers, switches, and storage, which could be located in Data Centers, network Nodes and in the end user premises. However, the question arises: are these concepts implementable from software developer point of view? The future of NFV approach depends on software developer activities. To talk about the NFV destiny, we try to overview the changes in telecom technologies: from ISDN and SS7, as well as All-IP concept, to SDN and its relationship with NFV. The conclusion is devoted to the discussion of NFV future from the software development point of view.

关键词： software defined network network functions virtualization intelligent network software standards middleware

来源：评论

学校读者我要写书评

暂无评论

Adaptive Multipath Routing for network functions virtualization 16

Adaptive Multipath Routing for Network Functions Virtualizat...

引用

7th Symposium on Information and Communication Technology (SoICT)

作者： Thi-Thuy-Lien Nguyen Tuan-Minh Pham Huynh Thi Thanh Binh Hanoi Natl Univ Educ Fac Informat Technol Hanoi Vietnam Hanoi Univ Sci & Technol Sch Informat & Commun Technol Hanoi Vietnam

ISBN: (纸本)9781450348157

network functions virtualization (NFV) is a recent trend of network transformation that helps service providers offer new and multiple services in a more agile and cost effective way. However, the softwarization and cloudization of network functions can result in high congestion and low network performance for virtual networks. We develop a multipath routing solution for minimizing the maximum link utilization, thus leading to the performance improvement of NFV-based systems, as well as the efficient utilization of network resources. Our proposed algorithm can adapt the link weight system to the dynamic change of service demands for optimizing the distribution of network traffic, with regard to the fundamental NFV characteristics and the Equal-cost Multi path (ECMP) routing feature. The evaluation results show that the proposed solution outperforms a multipath solution with fixed link weight on various performance metrics. Interestingly, we find that the network performance is not significantly improved by increasing the number of paths beyond a threshold.

关键词： network functions virtualization multipath routing optimization

来源：评论

学校读者我要写书评

暂无评论

Load Balancing using Multipath Routing In network functions virtualization

Load Balancing using Multipath Routing In Network Functions ...

引用

IEEE RIVF International Conference on Computing & Communication Technologies, Research, Innovation, and Vision for the Future (RIVF)

作者： Tuan-Minh Pham Linh Manh Pham Hanoi Natl Univ Educ Hanoi Vietnam INRIA Rennes France

ISBN: (纸本)9781509041343

network functions virtualization (NFV) is a new approach in architectural model of communication networks, where network functions are softwarized and can be deployed dynamically on most different spots in the network, replacing the specialized equipments located at predetermined locations. NFV comes out as an important transformation trend in the recent development of communication networks due to advantages such as the ability to highly customize the network scale and minimize the investment costs. In this research, we analyze and solve the load balancing problem using multipath routing in NFV to optimize network performance and improve responsive ability of a network system based on NFV according to the dynamic changes of user demands. We propose the FAST-RACE algorithm which has ability to give a weight system on the links of the NFV infrastructure in order to equally distribute load among the several shortest paths and minimize the network delay of data flows in the network. The experiment results show that FAST-RACE declines the average delay of data flows about 26% and could support approximately a 14% increase in the number of service demands in comparison to the load balancing solution using hop-count. Specially, the effective performance of FAST-RACE is not subject to a number of service demands and a number of nodes in the NFV infrastructure.

关键词： NFV network functions virtualization Multipath routing Load balancing

来源：评论

学校读者我要写书评

暂无评论

Monitoring Transport and Cloud for network functions virtualization 4

Monitoring Transport and Cloud for Network Functions Virtual...

引用

Fourth European Workshop on Software Defined networks - EWSDN 2015

作者： Moradi, Farnaz Pechenot, Bertrand Martensson, Jonas Ericsson Res Kista Sweden Acreo Swedish ICT Kista Sweden

In this demonstration, we present a monitoring framework for VNFs running inside containers in a cloud system consisting of multiple data centers. We illustrate a use case for the monitoring framework by demonstrating... 详细信息

ISBN: (纸本)9781509001804

关键词： Distributed monitoring network functions virtualization Software defined networking

来源：评论

学校读者我要写书评

暂无评论

Memory network Architecture for Packet Processing in functions virtualization

引用

IEEE TRANSACTIONS ON network AND SERVICE MANAGEMENT 2022年第3期19卷 3304-3322页

作者： Korikawa, Tomohiro Oki, Eiji Kyoto Univ Grad Sch Informat Kyoto 6068501 Japan NTT Corp Network Innovat Ctr Tokyo 1808585 Japan

Packet processing tasks in network functions require high-performance memory systems to understand the packet information, update the packet content, and search the databases. While network virtualization is expected to bring flexible and adaptive network with reduced cost by using commercial off-the-shelf (COTS) hardware and programmable data plane technology, network function performance suffers from the poor memory systems in COTS computers and lack of scalability in programmable hardware devices. This paper proposes a memory network architecture for packet processing based on memory-centric, disaggregated computing. Unlike processor-centric architecture in today's COTS computers, the memory network consists of multiple memory devices, where processing for the incoming packets is completed. The proposed architecture reduces packet processing latency by eliminating communication between the processor devices and the memory devices. Also, the proposed architecture provides scalability of hardware resources by dynamic memory device allocation depending on the complexity of the network function, memory-intensiveness of packet processing, and traffic load. The numerical results show that the proposed architecture reduces accumulated latency for memory accesses and increases throughput compared to the conventional, processor-centric architectures, where every memory access requires communication between the processor devices and the memory devices. The proposed architecture also reduces latency and increases throughput by allocating additional memory devices to memory-intensive tasks.

关键词： Memory management Random access memory Computer architecture Task analysis virtualization Hardware Performance evaluation network functions virtualization packet processing memory network memory-centric computing disaggregated computing

来源：评论

学校读者我要写书评

暂无评论

Software-Defined networks and network functions virtualization in Wireline Access networks

Software-Defined Networks and Network Functions Virtualizati...

引用

IEEE Global Communications Conference (GLOBECOM)

作者： Kozicki, Bartek Olaziregi, Nikolas Oberle, Karsten Sharpe, Randall B. Clougherty, Mark Bell Labs Alcatel Lucent Bell B-2018 Antwerp Belgium Alcatel Lucent Bell Labs D-70435 Stuttgart Germany Alcatel Lucent Fixed Networks CTO Raleigh NC 27612 USA Alcatel Lucent Corp CTO Murray Hill NJ 07974 USA

ISBN: (纸本)9781479974702

SDN and NFV are the two major concepts in the telecommunications space driving a radical industry transition towards future programmable carrier grade networks. Both technologies have received considerable attention over the last few years especially boosted by the foundation of the ETSI NFV Industry Specification Group and driven by nearly all major network operators. The application of SDN and NFV in telco networks promises a faster time to market for new services and, at the same time, a dramatic reduction of costs in both OPEX and CAPEX. Up to now the majority of efforts in that space have focused on core networks and less on wireline access networks. This paper addresses this topic by presenting the motivation and the primary use cases for applying SDN and NFV to wireline access networks as well as by analyzing the current related standards work. We conclude with an outlook on potential future work in this area, both in research and standards.

关键词： Software-Defined networks SDN network functions virtualization NFV Standards Wireline Access network

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：