Advanced search
Start date
Betweenand


BSec-NFVO: A Blockchain-based Security for Network Function Virtualization Orchestration

Full text
Author(s):
Rebello, Gabriel Antonio F. ; Alvarenga, Igor D. ; Sanz, Igor J. ; Duarte, Otto Carlos M. B. ; IEEE
Total Authors: 5
Document type: Journal article
Source: ICC 2019 - 2019 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC); v. N/A, p. 6-pg., 2019-01-01.
Abstract

Network Function Virtualization (NFV) and Service Function Chaining (SFC) offer flexible end-to-end services that deploy virtual network functions in clouds of competing providers. Orchestration of virtual network functions occurs in a distributed and trustless environment that must tolerate byzantine failures and collusion attacks. This paper proposes BSec-NFVO, a blockchain-based system that secures orchestration operations in virtualized networks, ensuring auditability, non-repudiation and integrity. We propose an NFV-tailored blockchain and a transaction model. BSec-NFVO provides a modular architecture to secure orchestration in a simple and agile way. We develop a prototype of BSec-NFVO for the Open Platform for Network Function Virtualization (OPNFV) with an adaptation of the normal-case of a collusion-resistant consensus protocol. The results show BSec-NFVO incurs low overhead to the cloud orchestrator and presents stable performance as the number of consensus participants increases. (AU)

FAPESP's process: 15/24485-9 - Future internet for smart cities
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants
FAPESP's process: 14/50937-1 - INCT 2014: on the Internet of the Future
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants
FAPESP's process: 15/24514-9 - Stream project: security in real-time with elasticity, analytic, and monitoring
Grantee:Otto Carlos Muniz Bandeira Duarte
Support Opportunities: Regular Research Grants