TY - GEN
T1 - NFVGuard
T2 - 12th IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2020
AU - Oqaily, Alaa
AU - Sudershan, L.T.
AU - Jarraya, Yosr
AU - Majumdar, Suryadipta
AU - Zhang, Mengyuan
AU - Pourzandi, Makan
AU - Wang, Lingyu
AU - Debbabi, Mourad
PY - 2020/12/1
Y1 - 2020/12/1
N2 - Network Functions Virtualization (NFV) enables agile and cost-effective deployment of multi-tenant network services on top of a cloud infrastructure. However, the multi-tenant and multilevel nature of NFV may lead to novel security challenges, such as stealthy attacks exploiting potential inconsistencies between different levels of the NFV stacks. Consequently, the security compliance of a multilevel NFV stack cannot be sufficiently established using existing solutions, which typically focus on one level. Moreover, the naive approach of separately verifying every level could be expensive or even infeasible. In this paper, we propose, NFVGuard, the first multilevel approach to the formal security verification of NFV stacks. Our key idea is to conduct the security verification at only one level, and then assure that verification result for other levels by verifying the consistency between adjacent levels. We integrate NFVGuard with OpenStack/Tacker, a popular platform for the NFV deployment, and experimentally evaluate its effectiveness.
AB - Network Functions Virtualization (NFV) enables agile and cost-effective deployment of multi-tenant network services on top of a cloud infrastructure. However, the multi-tenant and multilevel nature of NFV may lead to novel security challenges, such as stealthy attacks exploiting potential inconsistencies between different levels of the NFV stacks. Consequently, the security compliance of a multilevel NFV stack cannot be sufficiently established using existing solutions, which typically focus on one level. Moreover, the naive approach of separately verifying every level could be expensive or even infeasible. In this paper, we propose, NFVGuard, the first multilevel approach to the formal security verification of NFV stacks. Our key idea is to conduct the security verification at only one level, and then assure that verification result for other levels by verifying the consistency between adjacent levels. We integrate NFVGuard with OpenStack/Tacker, a popular platform for the NFV deployment, and experimentally evaluate its effectiveness.
UR - http://www.scopus.com/inward/record.url?scp=85105819353&partnerID=8YFLogxK
U2 - 10.1109/CloudCom49646.2020.00003
DO - 10.1109/CloudCom49646.2020.00003
M3 - Conference contribution
T3 - Proceedings of the International Conference on Cloud Computing Technology and Science, CloudCom
SP - 33
EP - 40
BT - Proceedings - 2020 IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2020
PB - IEEE Computer Society
Y2 - 14 December 2020 through 17 December 2020
ER -