TY - GEN
T1 - Assuring virtual network function image integrity and host sealing in Telco cloud
AU - Lal, Shankar
AU - Ravidas, Sowmya
AU - Oliver, Ian
AU - Taleb, Tarik
PY - 2017/7/28
Y1 - 2017/7/28
N2 - In Telco cloud environment, virtual network functions (VNFs) can be shipped in the form of virtual machine images and hosted over commodity hardware. It is likely that these VNF images will contain highly sensitive data and mission critical network operations. For this reason, these VNF images are prone to malicious tampering during shipping and even after uploaded to the cloud image database. Furthermore, due to various applications, there is a requirement from mobile network operators to seal VNFs on specific platforms which satisfy certain hardware and software configurations. This requires cloud service providers to introduce some mechanisms to verify VNF image integrity and host sealing before the instantiation of VNFs. In this paper, we present a proof of concept demonstrated with the help of an experimental setup to solve the above-mentioned problems. We also evaluate the performance of the envisioned setup and present some insights on its usability.
AB - In Telco cloud environment, virtual network functions (VNFs) can be shipped in the form of virtual machine images and hosted over commodity hardware. It is likely that these VNF images will contain highly sensitive data and mission critical network operations. For this reason, these VNF images are prone to malicious tampering during shipping and even after uploaded to the cloud image database. Furthermore, due to various applications, there is a requirement from mobile network operators to seal VNFs on specific platforms which satisfy certain hardware and software configurations. This requires cloud service providers to introduce some mechanisms to verify VNF image integrity and host sealing before the instantiation of VNFs. In this paper, we present a proof of concept demonstrated with the help of an experimental setup to solve the above-mentioned problems. We also evaluate the performance of the envisioned setup and present some insights on its usability.
UR - http://www.scopus.com/inward/record.url?scp=85028320635&partnerID=8YFLogxK
U2 - 10.1109/ICC.2017.7997299
DO - 10.1109/ICC.2017.7997299
M3 - Conference article in proceedings
AN - SCOPUS:85028320635
T3 - IEEE International Conference on Communications
BT - 2017 IEEE International Conference on Communications, ICC 2017
PB - IEEE
T2 - IEEE International Conference on Communications
Y2 - 21 May 2017 through 25 May 2017
ER -