scholarly journals Attacks against Network Functions Virtualization and Software-Defined Networking: State-of-the-art

Author(s):  
Francois Reynaud ◽  
Francois-Xavier Aguessy ◽  
Olivier Bettan ◽  
Mathieu Bouet ◽  
Vania Conan
2016 ◽  
Author(s):  
Georgios P Katsikas ◽  
Marcel Enguehard ◽  
Maciej Kuźniar ◽  
Gerald Q Maguire Jr. ◽  
Dejan Kostić

In this paper we introduce SNF, a framework that synthesizes (S) network function (NF) service chains by eliminating redundant I/O and repeated elements, while consolidating stateful cross layer packet operations across the chain. SNF uses graph composition and set theory to determine traffic classes handled by a service chain composed of multiple elements. It then synthesizes each traffic class using a minimal set of new elements that apply single-read-single-write and early-discard operations. Our SNF prototype takes a baseline state-of-the-art network functions virtualization (NFV) framework to the level of performance required for practical NFV service deployments. Software-based SNF realizes long (up to 10 NFs) and stateful service chains that achieve line-rate 40 Gbps throughput (up to 8.5x greater than the baseline NFV framework). Hardware-assisted SNF, using a commodity OpenFlow switch, shows that our approach scales at 40 Gbps for Internet Service Provider-level NFV deployments.


2019 ◽  
Vol 25 (1) ◽  
pp. 1-40 ◽  
Author(s):  
Vanita Jain ◽  
Vivek Yatri ◽  
Kanchan ◽  
Chaitanya Kapoor

2021 ◽  
Vol 38 (1-2) ◽  
pp. 1-45
Author(s):  
Georgios P. Katsikas ◽  
Tom Barbette ◽  
Dejan Kostić ◽  
JR. Gerald Q. Maguire ◽  
Rebecca Steinert

Deployment of 100Gigabit Ethernet (GbE) links challenges the packet processing limits of commodity hardware used for Network Functions Virtualization (NFV). Moreover, realizing chained network functions (i.e., service chains) necessitates the use of multiple CPU cores, or even multiple servers, to process packets from such high speed links. Our system Metron jointly exploits the underlying network and commodity servers’ resources: ( i ) to offload part of the packet processing logic to the network, ( ii )  by using smart tagging to setup and exploit the affinity of traffic classes, and ( iii )  by using tag-based hardware dispatching to carry out the remaining packet processing at the speed of the servers’ cores, with zero inter-core communication. Moreover, Metron transparently integrates, manages, and load balances proprietary “blackboxes” together with Metron service chains. Metron realizes stateful network functions at the speed of 100GbE network cards on a single server, while elastically and rapidly adapting to changing workload volumes. Our experiments demonstrate that Metron service chains can coexist with heterogeneous blackboxes, while still leveraging Metron’s accurate dispatching and load balancing. In summary, Metron has ( i )  2.75–8× better efficiency, up to ( ii )  4.7× lower latency, and ( iii )  7.8× higher throughput than OpenBox, a state-of-the-art NFV system.


2015 ◽  
Vol 57 (5) ◽  
Author(s):  
Michael Jarschel ◽  
Arsany Basta ◽  
Wolfgang Kellerer ◽  
Marco Hoffmann

AbstractThe introduction of Software Defined Networking (SDN) and Network Functions Virtualization (NFV) has transformed the way networks will be built in the future. This development also applies to mobile networks and their evolution. How the SDN and NFV concepts will be integrated exactly is still an open research question with multiple approaches and techniques in discussion. This article provides an overview of the current discussion points with regard to development paths, building blocks, deployment scenarios, and the opportunities and challenges of the new concepts in the mobile core network context.


2016 ◽  
Vol 64 (9) ◽  
Author(s):  
Robert Bauer ◽  
Roland Bless ◽  
Christian Haas ◽  
Markus Jung ◽  
Martina Zitterbart

AbstractThis paper describes a framework for software-based networking in smart factories (SF) that enables them to easily adapt the communication network to changing requirements. Similar to cloud-based systems, such SFs could be seen as production clusters that could be rented and configured as needed. The SF network utilizes software-defined networking (SDN) combined with network functions virtualization (NFV) in order to achieve the required flexibility. This paper presents and discusses


Author(s):  
Vishal Kaushik ◽  
Ajay Sharma ◽  
Ravi Tomar

Software-defined networking (SDN) is an emerging network architecture that facilitates the network administrator to control and manage network behavior dynamically. Different from traditional networks, software-defined networks support dynamic and scalable computing. The dynamic behavior is achieved by decoupling or disassociating the system. The swing of control from tightly bound individual networks to assessable computing devices enables infrastructure abstraction. Due to the abstraction, the network can be considered as a logical or virtual entity. In this chapter, relation between network function virtualization (NFV) and software-defined networking (SDN) has been outlined. This chapter focuses on describing the pros and cons of NFV technologies. network functions virtualization (NFV) was founded under the work of the European Telecommunications Standards Institute (ETSI).


2020 ◽  
Author(s):  
Rochak Swami ◽  
Mayank Dave ◽  
Virender Ranga

Distributed Denial of Service attack (DDoS) is recognized to be one of the catastrophic attacks against various digital communication entities. Software-defined networking (SDN) is an emerging technology for computer networks that uses open protocols for controlling switches and routers placed at the network edges by using specialized open programmable interfaces. In this paper, a detailed study on DDoS threats prevalent in SDN is presented. Firstly, SDN features are examined from the perspective of security, and then, a discussion on assessment of SDN security features is done. Further, two viewpoints towards protecting the networks against DDoS attacks are elaborated. In the first view, SDN utilizes its abilities to secure the conventional networks. In the second view, SDN may become a victim of the threats itself because of the centralized control mechanism. The main focus of this research work is towards discovering critical security implications in SDN while reviewing the current ongoing research studies. By emphasizing the available state of the art techniques, an extensive review towards the advancement of the SDN security is provided to the researchers and IT communities.


2020 ◽  
Author(s):  
Rochak Swami ◽  
Mayank Dave ◽  
Virender Ranga

Distributed Denial of Service attack (DDoS) is recognized to be one of the catastrophic attacks against various digital communication entities. Software-defined networking (SDN) is an emerging technology for computer networks that uses open protocols for controlling switches and routers placed at the network edges by using specialized open programmable interfaces. In this paper, a detailed study on DDoS threats prevalent in SDN is presented. Firstly, SDN features are examined from the perspective of security, and then, a discussion on assessment of SDN security features is done. Further, two viewpoints towards protecting the networks against DDoS attacks are elaborated. In the first view, SDN utilizes its abilities to secure the conventional networks. In the second view, SDN may become a victim of the threats itself because of the centralized control mechanism. The main focus of this research work is towards discovering critical security implications in SDN while reviewing the current ongoing research studies. By emphasizing the available state of the art techniques, an extensive review towards the advancement of the SDN security is provided to the researchers and IT communities.


2016 ◽  
Author(s):  
Georgios P Katsikas ◽  
Marcel Enguehard ◽  
Maciej Kuźniar ◽  
Gerald Q Maguire Jr. ◽  
Dejan Kostić

In this paper we introduce SNF, a framework that synthesizes (S) network function (NF) service chains by eliminating redundant I/O and repeated elements, while consolidating stateful cross layer packet operations across the chain. SNF uses graph composition and set theory to determine traffic classes handled by a service chain composed of multiple elements. It then synthesizes each traffic class using a minimal set of new elements that apply single-read-single-write and early-discard operations. Our SNF prototype takes a baseline state-of-the-art network functions virtualization (NFV) framework to the level of performance required for practical NFV service deployments. Software-based SNF realizes long (up to 10 NFs) and stateful service chains that achieve line-rate 40 Gbps throughput (up to 8.5x greater than the baseline NFV framework). Hardware-assisted SNF, using a commodity OpenFlow switch, shows that our approach scales at 40 Gbps for Internet Service Provider-level NFV deployments.


Sign in / Sign up

Export Citation Format

Share Document