An Evaluation of a Virtual Network Function for Real-Time Threat Detection using Stream Processing

Author(s)

Lopez, Martin Andreoni ; Pastana Lobato, Antonio Gonzalez ; Duarte, Otto Carlos M. B. ; Pujolle, Guy ; Urien, P ; Piramuthu, S

• Document type: Journal article
• Source: PROCEEDINGS OF THE 2018 FOURTH INTERNATIONAL CONFERENCE ON MOBILE AND SECURE SERVICES (MOBISECSERV); v. N/A, p. 5-pg., 2018-01-01.

Abstract

Network Function Virtualization (NFV) provides new opportunities for efficient and low-cost security solutions. Real-time traffic monitoring and fast security threat detection is a challenge to reduce the risk of great damages. In this paper, we propose a virtualized network function in an Open Source Platform for providing a real-time threat detection service. Our function combines cloud computing and distributed stream processing techniques to accurately and quickly detect threats. The proposed virtualized network function shows a good elasticity shrinking and scaling accordingly to the required load. The results show that the proposed function is able to scale dynamically, analyzing more than five million messages per second. In addition, the function easily migrates sensor elements to reduce latency, allowing the sensor to be located as near as possible to the client. (AU)

• FAPESP's process: 15/24485-9 - Future internet for smart cities
• Grantee: Fabio Kon
• Support Opportunities: Research Projects - Thematic Grants
• FAPESP's process: 15/24514-9 - Stream project: security in real-time with elasticity, analytic, and monitoring
• Grantee: Otto Carlos Muniz Bandeira Duarte
• Support Opportunities: Regular Research Grants
• FAPESP's process: 14/50937-1 - INCT 2014: on the Internet of the Future
• Grantee: Fabio Kon
• Support Opportunities: Research Projects - Thematic Grants