Abstract
We present an architecture and implementation of the security wrapper concept for the protection of virtualized network functions in a cloud environment. The security wrapper is the enclosing of a set of virtualized resources within a data plane transparent protective envelope in the network forwarding graph. The extent and capabilities of this envelope are dynamic. We present a prototype implementation of the security wrapper and analyze its behaviour in different operation scenarios. Measurements of the wrapper orchestration delays, resource overhead and data plane traffic impact indicate that the proposed mechanism can be deployed in virtualized networks with little overhead while remaining relatively transparent to the traffic traversing the security wrapper boundary.
Original language | English |
---|---|
Title of host publication | ARES 2018 - 13th International Conference on Availability, Reliability and Security |
Publisher | ACM |
ISBN (Electronic) | 9781450364485 |
DOIs | |
Publication status | Published - 27 Aug 2018 |
MoE publication type | A4 Conference publication |
Event | International Conference on Availability, Reliability and Security - Hamburg, Germany Duration: 27 Aug 2018 → 30 Aug 2018 Conference number: 13 |
Conference
Conference | International Conference on Availability, Reliability and Security |
---|---|
Abbreviated title | ARES |
Country/Territory | Germany |
City | Hamburg |
Period | 27/08/2018 → 30/08/2018 |