Testbed for security orchestration in a network function virtualization environment

Aapo Kalliola; Shankar Lal; Kimmo Ahola; Ian Oliver; Miche Yoan; Silke Holtmanns

doi:10.1109/NFV-SDN.2017.8169857

Testbed for security orchestration in a network function virtualization environment

Aapo Kalliola, Shankar Lal, Kimmo Ahola, Ian Oliver, Miche Yoan, Silke Holtmanns

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

5 Citations (Scopus)

Abstract

We present a testbed implementation for the development, evaluation and demonstration of security orchestration in a network function virtualization environment. As a specific scenario, we demonstrate how an intelligent response to DDoS and various other kinds of targeted attacks can be formulated such that these attacks and future variations can be mitigated. We utilise machine learning to characterise normal network traffic, attacks and responses, then utilise this information to orchestrate virtualized network functions around affected components to isolate these components and to capture, redirect and filter traffic (e.g. honeypotting) for additional analysis. This allows us to maintain a high level of network quality of service to given network functions and components despite adverse network conditions.

Original language	English
Title of host publication	2017 IEEE Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017
Publisher	IEEE Institute of Electrical and Electronic Engineers
Number of pages	4
ISBN (Electronic)	978-1-5386-3285-7
ISBN (Print)	978-1-5386-3286-4
DOIs	https://doi.org/10.1109/NFV-SDN.2017.8169857
Publication status	Published - 7 Dec 2017
MoE publication type	A4 Article in a conference publication
Event	Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017 - Berlin, Germany Duration: 6 Dec 2017 → 8 Dec 2017

Conference

Conference	Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017
Abbreviated title	NFV-SDN 2017
Country/Territory	Germany
City	Berlin
Period	6/12/17 → 8/12/17

Funding

This work was supported by the DIMECC Cyber Trust programme.

Keywords

cloud computing
computer crime
network function virtualization
quality of service

Access to Document

10.1109/NFV-SDN.2017.8169857

Cite this

@inproceedings{062e900ef6a7482485f255f3ec3c8256,

title = "Testbed for security orchestration in a network function virtualization environment",

abstract = "We present a testbed implementation for the development, evaluation and demonstration of security orchestration in a network function virtualization environment. As a specific scenario, we demonstrate how an intelligent response to DDoS and various other kinds of targeted attacks can be formulated such that these attacks and future variations can be mitigated. We utilise machine learning to characterise normal network traffic, attacks and responses, then utilise this information to orchestrate virtualized network functions around affected components to isolate these components and to capture, redirect and filter traffic (e.g. honeypotting) for additional analysis. This allows us to maintain a high level of network quality of service to given network functions and components despite adverse network conditions.",

keywords = "cloud computing, computer crime, network function virtualization, quality of service",

author = "Aapo Kalliola and Shankar Lal and Kimmo Ahola and Ian Oliver and Miche Yoan and Silke Holtmanns",

note = "Funding Information: This work was supported by the DIMECC Cyber Trust programme. Publisher Copyright: {\textcopyright} 2017 IEEE.; Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017, NFV-SDN 2017 ; Conference date: 06-12-2017 Through 08-12-2017",

year = "2017",

month = dec,

day = "7",

doi = "10.1109/NFV-SDN.2017.8169857",

language = "English",

isbn = "978-1-5386-3286-4",

booktitle = "2017 IEEE Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

}

Kalliola, A, Lal, S, Ahola, K, Oliver, I, Yoan, M & Holtmanns, S 2017, Testbed for security orchestration in a network function virtualization environment. in 2017 IEEE Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017. IEEE Institute of Electrical and Electronic Engineers, Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017, Berlin, Germany, 6/12/17. https://doi.org/10.1109/NFV-SDN.2017.8169857

Testbed for security orchestration in a network function virtualization environment. / Kalliola, Aapo; Lal, Shankar; Ahola, Kimmo et al.
2017 IEEE Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017. IEEE Institute of Electrical and Electronic Engineers, 2017.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Testbed for security orchestration in a network function virtualization environment

AU - Kalliola, Aapo

AU - Lal, Shankar

AU - Ahola, Kimmo

AU - Oliver, Ian

AU - Yoan, Miche

AU - Holtmanns, Silke

PY - 2017/12/7

Y1 - 2017/12/7

N2 - We present a testbed implementation for the development, evaluation and demonstration of security orchestration in a network function virtualization environment. As a specific scenario, we demonstrate how an intelligent response to DDoS and various other kinds of targeted attacks can be formulated such that these attacks and future variations can be mitigated. We utilise machine learning to characterise normal network traffic, attacks and responses, then utilise this information to orchestrate virtualized network functions around affected components to isolate these components and to capture, redirect and filter traffic (e.g. honeypotting) for additional analysis. This allows us to maintain a high level of network quality of service to given network functions and components despite adverse network conditions.

AB - We present a testbed implementation for the development, evaluation and demonstration of security orchestration in a network function virtualization environment. As a specific scenario, we demonstrate how an intelligent response to DDoS and various other kinds of targeted attacks can be formulated such that these attacks and future variations can be mitigated. We utilise machine learning to characterise normal network traffic, attacks and responses, then utilise this information to orchestrate virtualized network functions around affected components to isolate these components and to capture, redirect and filter traffic (e.g. honeypotting) for additional analysis. This allows us to maintain a high level of network quality of service to given network functions and components despite adverse network conditions.

KW - cloud computing

KW - computer crime

KW - network function virtualization

KW - quality of service

UR - http://www.scopus.com/inward/record.url?scp=85043287295&partnerID=8YFLogxK

U2 - 10.1109/NFV-SDN.2017.8169857

DO - 10.1109/NFV-SDN.2017.8169857

M3 - Conference article in proceedings

SN - 978-1-5386-3286-4

BT - 2017 IEEE Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - Conference on Network Function Virtualization and Software Defined Networks, NFV-SDN 2017

Y2 - 6 December 2017 through 8 December 2017

ER -

Testbed for security orchestration in a network function virtualization environment

Abstract

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this