TIM: A Trust Insurance Mechanism for Network Function Virtualization Based on Trusted Computing

2017 ◽  
pp. 139-152 ◽  
Author(s):  
Guangwu Xu ◽  
Yankun Tang ◽  
Zheng Yan ◽  
Peng Zhang
Keyword(s):  
Trusted Computing ◽  
Network Function Virtualization ◽  
Network Function ◽  
Insurance Mechanism

scholarly journals Using Aerial and Vehicular NFV Infrastructures to Agilely Create Vertical Services

Sensors ◽  
2021 ◽  
Vol 21 (4) ◽  
pp. 1342
Author(s):  
Borja Nogales ◽  
Miguel Silva ◽  
Ivan Vidal ◽  
Miguel Luís ◽  
Francisco Valera ◽  
...  
Keyword(s):  
Ad Hoc Network ◽  
Ad Hoc ◽  
Cost Effective ◽  
Network Services ◽  
Network Function Virtualization ◽  
Mobile Environments ◽  
Network Resources ◽  
The Public ◽  
Network Function ◽  
And Performance

5G communications have become an enabler for the creation of new and more complex networking scenarios, bringing together different vertical ecosystems. Such behavior has been fostered by the network function virtualization (NFV) concept, where the orchestration and virtualization capabilities allow the possibility of dynamically supplying network resources according to its needs. Nevertheless, the integration and performance of heterogeneous network environments, each one supported by a different provider, and with specific characteristics and requirements, in a single NFV framework is not straightforward. In this work we propose an NFV-based framework capable of supporting the flexible, cost-effective deployment of vertical services, through the integration of two distinguished mobile environments and their networks: small sized unmanned aerial vehicles (SUAVs), supporting a flying ad hoc network (FANET) and vehicles, promoting a vehicular ad hoc network (VANET). In this context, a use case involving the public safety vertical will be used as an illustrative example to showcase the potential of this framework. This work also includes the technical implementation details of the framework proposed, allowing to analyse and discuss the delays on the network services deployment process. The results show that the deployment times can be significantly reduced through a distributed VNF configuration function based on the publish–subscribe model.

scholarly journals On Blockchain-Based Cross-Service Communication and Resource Orchestration on Edge Clouds

Informatics ◽  
2021 ◽  
Vol 8 (1) ◽  
pp. 13
Author(s):  
Konstantinos Papadakis-Vlachopapadopoulos ◽  
Ioannis Dimolitsas ◽  
Dimitrios Dechouniotis ◽  
Eirini Eleni Tsiropoulou ◽  
Ioanna Roussaki ◽  
...  
Keyword(s):  
Network Function Virtualization ◽  
Network Resources ◽  
Service Orchestration ◽  
Network Slicing ◽  
Network Function ◽  
Resource Orchestration ◽  
Full Capacity ◽  
Cloud Datacenter ◽  
Set Up ◽  
The Internet Of Things

With the advent of 5G verticals and the Internet of Things paradigm, Edge Computing has emerged as the most dominant service delivery architecture, placing augmented computing resources in the proximity of end users. The resource orchestration of edge clouds relies on the concept of network slicing, which provides logically isolated computing and network resources. However, though there is significant progress on the automation of the resource orchestration within a single cloud or edge cloud datacenter, the orchestration of multi-domain infrastructure or multi-administrative domain is still an open challenge. Towards exploiting the network service marketplace at its full capacity, while being aligned with ETSI Network Function Virtualization architecture, this article proposes a novel Blockchain-based service orchestrator that leverages the automation capabilities of smart contracts to establish cross-service communication between network slices of different tenants. In particular, we introduce a multi-tier architecture of a Blockchain-based network marketplace, and design the lifecycle of the cross-service orchestration. For the evaluation of the proposed approach, we set up cross-service communication in an edge cloud and we demonstrate that the orchestration overhead is less than other cross-service solutions.

scholarly journals Design and Implementation of Virtual Security Function Based on Multiple Enclaves

2021 ◽  
Vol 13 (1) ◽  
pp. 12
Author(s):  
Juan Wang ◽  
Yang Yu ◽  
Yi Li ◽  
Chengyang Fan ◽  
Shirong Hao
Keyword(s):  
Intrusion Detection System ◽  
Detection System ◽  
Network Function Virtualization ◽  
Sensitive Data ◽  
Network Function ◽  
State Security ◽  
Security Challenges ◽  
Iot Platforms ◽  
Scalable Network ◽  
Virtual Network Function

Network function virtualization (NFV) provides flexible and scalable network function for the emerging platform, such as the cloud computing, edge computing, and IoT platforms, while it faces more security challenges, such as tampering with network policies and leaking sensitive processing states, due to running in a shared open environment and lacking the protection of proprietary hardware. Currently, Intel® Software Guard Extensions (SGX) provides a promising way to build a secure and trusted VNF (virtual network function) by isolating VNF or sensitive data into an enclave. However, directly placing multiple VNFs in a single enclave will lose the scalability advantage of NFV. This paper combines SGX and click technology to design the virtual security function architecture based on multiple enclaves. In our design, the sensitive modules of a VNF are put into different enclaves and communicate by local attestation. The system can freely combine these modules according to user requirements, and increase the scalability of the system while protecting its running state security. In addition, we design a new hot-swapping scheme to enable the system to dynamically modify the configuration function at runtime, so that the original VNFs do not need to stop when the function of VNFs is modified. We implement an IDS (intrusion detection system) based on our architecture to verify the feasibility of our system and evaluate its performance. The results show that the overhead introduced by the system architecture is within an acceptable range.

Stochastic Performance Analysis of Network Function Virtualization in Future Internet

2019 ◽  
Vol 37 (3) ◽  
pp. 613-626 ◽  
Author(s):  
Wang Miao ◽  
Geyong Min ◽  
Yulei Wu ◽  
Haojun Huang ◽  
Zhiwei Zhao ◽  
...  
Keyword(s):  
Performance Analysis ◽  
Future Internet ◽  
Network Function Virtualization ◽  
Network Function
Sign in / Sign up

Export Citation Format

Share Document