Advanced search
Start date
Betweenand


Securing Configuration Management and Migration of Virtual Network Functions Using Blockchain

Full text
Author(s):
Alvarenga, Igor D. ; Rebello, Gabriel A. F. ; Duarte, Otto Carlos M. B. ; IEEE
Total Authors: 4
Document type: Journal article
Source: NOMS 2018 - 2018 IEEE/IFIP NETWORK OPERATIONS AND MANAGEMENT SYMPOSIUM; v. N/A, p. 9-pg., 2018-01-01.
Abstract

The integration of network function virtualization (NFV) and service function chaining (SFC) adds intelligence to the core of the network. The programmability of the network core, however, raises new vulnerabilities and increases the number of victims, since a simple modification in the core can affect multiple network users. Thus, the provision of secure virtual network service functions (VNFs) is mandatory to guarantee a correct chaining of network functions. This paper proposes a blockchain-based architecture for secure management, configuration and migration of VNFs, which ensures: (i) immutability, non-repudiation, and auditability of the configuration update history; (ii) integrity and consistency of stored information; and (iii) the anonymity of VNFs, tenants, and configuration information. Furthermore, the proposed architecture guarantees the secure update and migration of configurations at the core of the network. A prototype of the proposed architecture using the Open Platform for NFV (OPNFV) indicates parameter trade-offs and performance bottlenecks. (AU)

FAPESP's process: 15/24485-9 - Future internet for smart cities
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants
FAPESP's process: 15/24514-9 - Stream project: security in real-time with elasticity, analytic, and monitoring
Grantee:Otto Carlos Muniz Bandeira Duarte
Support Opportunities: Regular Research Grants
FAPESP's process: 14/50937-1 - INCT 2014: on the Internet of the Future
Grantee:Fabio Kon
Support Opportunities: Research Projects - Thematic Grants