An Evaluation of a Virtual Network Function for Real-Time Threat Detection using Stream Processing

Autor(es)

Lopez, Martin Andreoni ; Pastana Lobato, Antonio Gonzalez ; Duarte, Otto Carlos M. B. ; Pujolle, Guy ; Urien, P ; Piramuthu, S

• Tipo de documento: Artigo Científico
• Fonte: PROCEEDINGS OF THE 2018 FOURTH INTERNATIONAL CONFERENCE ON MOBILE AND SECURE SERVICES (MOBISECSERV); v. N/A, p. 5-pg., 2018-01-01.

Resumo

Network Function Virtualization (NFV) provides new opportunities for efficient and low-cost security solutions. Real-time traffic monitoring and fast security threat detection is a challenge to reduce the risk of great damages. In this paper, we propose a virtualized network function in an Open Source Platform for providing a real-time threat detection service. Our function combines cloud computing and distributed stream processing techniques to accurately and quickly detect threats. The proposed virtualized network function shows a good elasticity shrinking and scaling accordingly to the required load. The results show that the proposed function is able to scale dynamically, analyzing more than five million messages per second. In addition, the function easily migrates sensor elements to reduce latency, allowing the sensor to be located as near as possible to the client. (AU)

• Processo FAPESP: 15/24485-9 - Internet do futuro aplicada a cidades inteligentes
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 15/24514-9 - Projeto stream: segurança em tempo real com elasticidade, analítica e monitoramento
• Beneficiário: Otto Carlos Muniz Bandeira Duarte
• Modalidade de apoio: Auxílio à Pesquisa - Regular
• Processo FAPESP: 14/50937-1 - INCT 2014: da Internet do Futuro
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático