Security issues in network virtualization for the future Internet

2012 International Conference on Computing, Networking and Communications, ICNC'12

Volumn , Issue , 2012, Pages 537-543

  Natarajan, Sriram ^a   Wolf, Tilman ^a  

^a University of Massachusetts   (United States)

Author keywords

future Internet; isolation; network attacks; network security; network virtualization

Indexed keywords

COOPERATIVE ENVIRONMENT; FUTURE INTERNET; ISOLATION; KEY TECHNOLOGIES; LOGICAL NETWORK; NETWORK ATTACK; NETWORK INFRASTRUCTURE; NETWORK VIRTUALIZATION; POTENTIAL ATTACK; SECURE NETWORKS; SECURITY ISSUES; VIRTUAL NETWORK OPERATORS; VIRTUAL NETWORKS;

COMPUTER CRIME; INTERNET; NETWORK SECURITY; VIRTUAL REALITY;

INTERNET PROTOCOLS;

EID: 84859902620     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCNC.2012.6167481     Document Type: Conference Paper

References (37)

1. A. Feldmann, "Internet clean-slate design: what and why?" SIGCOMM Computer Communication Review, vol. 37, no. 3, pp. 59-64, Jul. 2007.
2. T. Anderson, L. Peterson, S. Shenker, and J. Turner, "Overcoming the Internet impasse through virtualization," Computer, vol. 38, no. 4, pp. 34-41, Apr 2005.
3. J. S. Turner, "A proposed architecture for the GENI backbone platform," in Proc. of ACM/IEEE Symposium on Architectures for Networking and Communication Systems (ANCS), San Jose, CA, Dec. 2006, pp. 1-10.
4. N. Chowdhury, M. Rahman, and R. Boutaba, "Virtual network embedding with coordinated node and link mapping," in INFOCOM 2009, IEEE, april 2009, pp. 783-791.
5. M. B. Anwer, M. Motiwala, M. b. Tariq, and N. Feamster, "SwitchBlade: a platform for rapid deployment of network protocols on programmable hardware," in Proceedings of the Conference on Applications, technologies, architectures, and protocols for computer communications (SIGCOMM), New Delhi, India, Sep. 2010, pp. 183-194.
6. Q. Wu, S. Shanbhag, and T. Wolf, "Fair multithreading on packet processors for scalable network virtualization," in Proc. of ACM/IEEE Symposium on Architectures for Networking and Communication Systems (ANCS), San Diego, CA, Oct. 2010.
7. Global Environment for Network Innovation, National Science Foundation, http://www.geni.net/.
8. An open platform for developing deploying and accessing planetary-scale services, Planetlab Consortium, http://www.planet-lab.org/.
9. Network Emulation Testbed, University of Utah, http://www.emulab.net/.
10. A. Bavier, N. Feamster, M. Huang, L. Peterson, and J. Rexford, "In VINI veritas: realistic and controlled network experimentation," in SIGCOMM '06: Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, Pisa, Italy, Aug. 2006, pp. 3-14.
11. J. S. Turner and D. E. Taylor, "Diversifying the Internet," in Proc. of IEEE Global Communications Conference (GLOBECOM), vol. 2, Saint Louis, MO, Nov. 2005.
12. N. Feamster, L. Gao, and J. Rexford, "How to lease the Internet in your spare time," SIGCOMM Computer Communication Review, vol. 37, Jan. 2007.
13. J. S. Turner, P. Crowley, J. DeHart, A. Freestone, B. Heller, F. Kuhns, S. Kumar, J. Lockwood, J. Lu, M. Wilson, C. Wiseman, and D. Zar, "Supercharging PlanetLab: a high performance, multi-application, overlay network platform," in SIGCOMM '07: Proceedings of the 2007 conference on Applications, technologies, architectures, and protocols for computer communications, Kyoto, Japan, Aug. 2007, pp. 85-96.
14. D. Yin, D. Unnikrishnan, Y. Liao, L. Gao, and R. Tessier, "Customizing virtual networks with partial fpga reconfiguration," SIGCOMM Computer Communication Review, vol. 41, pp. 125-132, Jan. 2011.
15. T. Wolf, "Challenges and applications for network-processor-based programmable routers," in Proc. of IEEE Sarnoff Symposium, Princeton, NJ, Mar. 2006.
16. Bad ISPs, VUZE, http://wiki.vuze.com/w/Bad-ISPs.
17. E. Keller, R. B. Lee, and J. Rexford, "Accountability in hosted virtual networks," in Proc. of the First ACM SIGCOMM Workshop on Virtualized Infrastructure Systems and Architectures (VISA), ser. VISA '09, Barcelona, Spain, Aug. 2009, pp. 29-36.
18. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds," in Proceedings of the 16th ACM conference on Computer and communications security, ser. CCS '09. New York, NY, USA: ACM, 2009, pp. 199-212. [Online]. Available: http://doi.acm.org/10.1145/1653662.1653687
19. N. M. M. K. Chowdhury and R. Boutaba, "A survey of network virtualization," Computer Networks, vol. 54, no. 5, pp. 862-876, Apr. 2010.
20. D. Chasaki, Q. Wu, and T. Wolf, "Attacks on network infrastructure," in Proc. of Twentieth IEEE International Conference on Computer Communications and Networks (ICCCN), Maui, HI, Aug. 2011.
21. D. Chasaki and T. Wolf, "Design of a secure packet processor," in Proc. of ACM/IEEE Symposium on Architectures for Networking and Communication Systems (ANCS), San Diego, CA, Oct. 2010.
22. M. Fukushima, T. Hasegawa, T. Hasegawa, and A. Nakao, "Minimum disclosure routing for network virtualization," in Computer Communications Workshops (INFOCOM WKSHPS), 2011 IEEE Conference on, april 2011, pp. 858-863.
23. Y. Wang, E. Keller, B. Biskeborn, J. van der Merwe, and J. Rexford, "Virtual routers on the move: live router migration as a network-management primitive," SIGCOMM Comput. Commun. Rev., vol. 38, pp. 231-242, August 2008. [Online]. Available: http://doi.acm.org/10.1145/1402946.1402985
24. C. Clark, K. Fraser, S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, and A. Warfield, "Live migration of virtual machines," in Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation - Volume 2, ser NSDI'05. Berkeley, CA, USA: USENIX Association, 2005, pp. 273-286. [Online]. Available: http://portal.acm.org/citation.cfm?id= 1251203.1251223
25. J. Oberheide, E. Cooke, and F. Jahanian, "Exploiting Live Virtual Machine Migration," in BlackHat DC Briefings, Washington DC, February 2008.
26. W. Eatherton, "The push of network processing to the top of the pyramid," in Keynote Presentation at ACM/IEEE Symposium on Architectures for Networking and Communication Systems (ANCS), Princeton, NJ, Oct. 2005.
27. FCC Rules Against Comcast for BitTorrent Blocking, Electronic Frontier Foundation, http://www.eff.org/deeplinks/2008/08/fcc-rules-against-comcast-bit- torrent-blocking.
28. E. Felten, Three Flavors of Net Neutrality, https://http://www.freedom- to-tinker.com/blog/felten/three-flavors-net-neutrality.
29. Message Stream Encryption, VUZE, http://wiki.vuze.com/w/Message-Stream- Encryption.
30. B. B. Brumley and J. Valkonen, "Attacks on message stream encryption," in Proceedings of the 13th Nordic Workshop on Secure IT Systems - NordSec '08, H. R. Nielson and C. W. Probst, Eds., October 2008, pp. 163-173.
31. C. Gentry, "Fully homomorphic encryption using ideal lattices," in Proceedings of the 41st annual ACM symposium on Theory of computing, ser. STOC '09. New York, USA: ACM, 2009, pp. 169-178. [Online]. Available: http://doi.acm.org/10.1145/1536414.1536440
32. L. Mekouar, Y. Iraqi, and R. Boutaba, "Incorporating trust in network virtualization," in Proceedings of the 2010 10th IEEE International Conference on Computer and Information Technology, ser. CIT '10. Washington, DC, USA. IEEE Computer Society, 2010, pp. 942-947. [Online]. Available: http://dx.doi.org/10.1109/CIT.2010.174
33. M. B. Tariq, M. Motiwala, N. Feamster, and M. Ammar, "Detecting network neutrality violations with causal inference," in Proceedings of the 5th international conference on Emerging networking experiments and technologies, ser. CoNEXT '09. New York, NY, USA: ACM, 2009, pp. 289-300. [Online]. Available: http://doi.acm.org/10.1145/1658939.1658972
34. A. T. Mizrak, Y.-C. Cheng, K. Marzullo, and S. Savage, "Detecting and isolating malicious routers," IEEE Transactions on Dependable and Secure Computing, vol. 3, no. 3, pp. 230-244, Jul-Sep 2006.
35. J. Hughes, T. Aura, and M. Bishop, "Using conservation of flow as a security mechanism in network protocols," in Security and Privacy, 2000. S P 2000. Proceedings. 2000 IEEE Symposium on, 2000, pp. 132-141.
36. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, "OpenFlow: enabling innovation in campus networks," SIGCOMM Computer Communication Review, vol. 38, no. 2, pp. 69-74, Apr 2008.
37. M. B. Anwer and N. Feamster, "Building a fast, virtualized data plane with programmable hardware," in Proc. of the First ACM SIGCOMM Workshop on Virtualized Infrastructure Systems and Architectures (VISA,), Barcelona, Spain, Aug. 2009, pp. 1-8.