%0 Conference Proceedings
%T A Framework for SFC Integrity in NFV Environments
%+ Universiteit Gent = Ghent University (UGENT)
%+ Universidade Federal do Rio Grande do Sul [Porto Alegre] (UFRGS)
%A Bondan, Lucas
%A Wauters, Tim
%A Volckaert, Bruno
%A Turck, Filip, De
%A Granville, Lisandro, Zambenedetti
%Z Part 6: Ph.D. Track: Methods for the Protection of Infrastructure and Services
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 11th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS)
%C Zurich, Switzerland
%Y Daphne Tuncer
%Y Robert Koch
%Y Rémi Badonnel
%Y Burkhard Stiller
%I Springer International Publishing
%3 Security of Networks and Services in an All-Connected World
%V LNCS-10356
%P 179-184
%8 2017-07-10
%D 2017
%R 10.1007/978-3-319-60774-0_18
%K Service function chaining
%K Network functions virtualization
%K Anomaly detection
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X Industry and academia have increased the deployment of Network Functions Virtualization (NFV) on their environments, either for reducing expenditures or taking advantage of NFV flexibility for service provisioning. In NFV, Service Function Chainings (SFC) composed of Virtualized Network Functions (VNF) are defined to deliver services to different customers. Despite the advancements in SFC composition for service provisioning, there is still a lack of proposals for ensuring the integrity of NFV service delivery, i.e., detecting anomalies in SFC operation. Such anomalies could indicate a series of different threats, such as DDoS attacks, information leakage, and unauthorized access. In this PhD, we propose a framework composed of an SFC Integrity Module (SIM) for the standard NFV architecture, providing the integration of anomaly detection mechanisms to NFV orchestrators. We present recent results of this PhD regarding the implementation of an entropy-based anomaly detection mechanism using the SIM framework. The results presented in this paper are based on the execution of the proposed mechanism using a realistic SFC data set.
%G English
%Z TC 6
%Z WG 6.6
%2 https://inria.hal.science/hal-01806053/document
%2 https://inria.hal.science/hal-01806053/file/452969_1_En_18_Chapter.pdf
%L hal-01806053
%U https://inria.hal.science/hal-01806053
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-TC6
%~ IFIP-AIMS
%~ IFIP-WG6-6
%~ IFIP-LNCS-10356