NTaaS: Network trustworthiness as a service

Xiang, Ming; Liu, William; Bai, Quan; Al-Anbuky, Adnan; Wu, Jinsong; Sathiaseelan, Arjuna

doi:10.1109/atnac.2017.8215437

Cited by 2 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Current frameworks are tending toward modularization or fragmentation, making that services can be offered independently through the network. In this sense, Security as a Service (SECaaS) [62] and TaaS [63] cloud applications are emerging, so that the requirements of each entity can be covered independently and in a personalized way. • From centralized architectures to decentralized ones Together with the virtualization of services, also comes its decentralization.…”

Section: Discussion Trends and Challengesmentioning

confidence: 99%

Design of a Security and Trust Framework for 5G Multi-domain Scenarios

et al. 2021

View full text Add to dashboard Cite

With the expansion of 5G networks, new business models are arising where multi-tenancy and active infrastructure sharing will be key enablers for them. With these new opportunities, new security risks are appearing in the form of a complex and evolving threat landscape for 5G networks, being one of the main challenges for the 5G mass rollout. In 5G-enabled scenarios, adversaries can exploit vulnerabilities associated with resource sharing to perform lateral movements targeting other tenant resources, as well as to disturb the 5G services offered or even the infrastructure resources. Moreover, existing security and trust models are not adequate to react to the dynamicity of the 5G infrastructure threats nor to the multi-tenancy security risks. Hence, we propose in this work a new security and trust framework for 5G multi-domain scenarios. To motivate its application, we detail a threat model covering multi-tenant scenarios in an underlying 5G network infrastructure. We also propose different ways to mitigate these threats by increasing the security and trust levels using network security monitoring, threat investigation, and end-to-end trust establishments. The framework is applied in a realistic use case of the H2020 5GZORRO project, which envisions a multi-tenant environment where domain owners share resources at will. The proposed framework forms a secure environment with zero-touch automation capabilities, minimizing human intervention.

show abstract

Section: Discussion Trends and Challengesmentioning

confidence: 99%

Design of a Security and Trust Framework for 5G Multi-domain Scenarios

et al. 2021

View full text Add to dashboard Cite

show abstract

“…In the simulation, geometric distribution is used to generate the traffic flows. To test the failure recovery, we fail a link with the highest degree (ie, to preserve the availability and reliability in the network) in each time slot (eg, at the TS k , k − 1 nodes were failed). For the comparisons, we focus on the number of the flow violations happens in shortest path service chaining (SPSC) compared to our solutions.…”

Section: Scenario Descriptionmentioning

confidence: 99%

Software defined service function chaining with failure consideration for fog computing

Tajiki

Shojafar

Akbari

et al. 2018

Concurrency and Computation

View full text Add to dashboard Cite

Middleboxes have become a vital part of modern networks by providing services such as load balancing, optimization of network traffic, and content filtering. A sequence of middleboxes comprising a logical service is called a Service Function Chain (SFC). In this context, the main issues are to maintain an acceptable level of network path survivability and a fair allocation of the resource between different demands in the event of faults or failures. In this paper, we focus on the problems of traffic engineering, failure recovery, fault prevention, and SFC with reliability and energy consumption constraints in Software Defined Networks (SDN). These types of deployments use Fog computing as an emerging paradigm to manage the distributed small-size traffic flows passing through the SDN-enabled switches (possibly Fog Nodes). The main aim of this integration is to support service delivery in real-time failure recovery in an SFC context. First, we present an architecture for Failure Recovery called FRFP; this is a multi-tier structure in which the real-time traffic flows pass through SDN-enabled switches to jointly decrease the network side-effects of flow rerouting and energy consumption of the Fog Nodes. We then mathematically formulate an optimization problem called the Optimal Fast Failure Recovery algorithm (OFFR) and propose a near-optimal heuristic called Heuristic HFFR to solve the corresponding problem in polynomial time. In this way, the reliability of the selected paths are optimized, while the network congestion is minimized. KEYWORDS failure recovery, fog computing (FC), network function virtualization (NFV), resource reallocation, service function chaining (SFC), software defined network (SDN) 1 INTRODUCTION Network Function Virtualization (NFV) paradigm decouples network functions (NFs) from dedicated hardware equipment and provides more flexibility to the owner of an IT infrastructure. NFV consists in a set of different services running on generic hardware (eg, IDS, proxy, deep packet inspection, and firewall) that are chained using the so called Service Function Chaining (SFC) concept. This concept can be applied to industrial environments; in particular, NFV is used in industrial network design in order to reduce exposure to risks, reduce CAPEX/OPEX costs, and minimize future performance issues by basing the infrastructure upon commodity servers and switches. 1 NFV and SFCs offer a great flexibility in the chaining and placement of NFs. The European Telecommunications Standards Institute (ETSI) is driving the standardization of NFV. Software Defined Networking (SDN) complements NFV and is concerned with the decoupling of control plane functionality from packet forwarding devices, allowing a controller to flexibly configure the networking operations in the infrastructure. NFV and SDN require attention to avoid cascading threats as well ascontroller protections, especially for the software applications across the SDN switches that interoperate with the server virtualization and virtual machines (VMs). 2...

show abstract

NTaaS: Network trustworthiness as a service

Cited by 2 publications

References 11 publications

Design of a Security and Trust Framework for 5G Multi-domain Scenarios

Design of a Security and Trust Framework for 5G Multi-domain Scenarios

Software defined service function chaining with failure consideration for fog computing

Contact Info

Product

Resources

About