Verifiable network function outsourcing: Requirements, challenges, and roadmap

HotMiddlebox 2013 - Proceedings of the 2013 Workshop on Hot Topics in Middleboxes and Network Function Virtualization

Volumn , Issue , 2013, Pages 25-30

  Fayazbakhsh, Seyed Kaveh ^a   Reiter, Michael K ^b   Sekar, Vyas ^a  

^a STONY BROOK UNIVERSITY   (United States)

^b UNIVERSITY OF NORTH CAROLINA   (United States)

Author keywords

Middlebox; Network function outsourcing (NFO); Verification

Indexed keywords

OUTSOURCING; VERIFICATION; VIRTUAL REALITY;

MIDDLEBOXES; NETWORK FUNCTIONS; POSITION PAPERS; ROADMAP; SMALL BUSINESS;

COMPUTER SYSTEM FIREWALLS;

EID: 84893360247     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2535828.2535831     Document Type: Conference Paper

References (29)

1. Trusted Computing Group. http://www.trustedcomputinggroup.org/.
2. M. K. Aguilera, J. C. Mogul, J. L. Wiener, P. Reynolds, and A. Muthitacharoen. Performance debugging for distributed systems of black boxes. In Proc. SOSP, 2003.
3. A. Anand, V. Sekar, and A. Akella. SmartRE: an architecture for coordinated network-wide redundancy elimination. In Proc. SIGCOMM, 2009.
4. K. Argyraki, P. Maniatis, and A. Singla. Verifiable network-performance measurements. In Proc. CoNEXT, 2010.
5. T. Benson, A. Akella, A. Shaikh, and S. Sahu. CloudNaaS: a cloud networking platform for enterprise applications. In Proc. SOCC, 2011.
6. S. Berger, R. Cáceres, D. Pendarakis, R. Sailer, E. Valdez, R. Perez, W. Schildhauer, and D. Srinivasan. TVDc: managing security in the trusted virtual datacenter. SIGOPS Oper. Syst. Rev., 42(1):40-47, Jan. 2008.
7. C. Chen, P. Maniatis, A. Perrig, A. Vasudevan, and V. Sekar. Towards verifiable resource accounting for outsourced computation. In Proc. VEE, 2013.
8. Y. Chen, B. Liu, Y. Chen, A. Li, X. Yang, and J. Bi. PacketCloud: an open platform for elastic in-network services. In Proc. MobiArch, 2013.
9. M. Chiosi et al. Network functions virtualisation: An introduction, benefits, enablers, challenges and call for action. Technical report, ETSI, 2012.
10. R. Chow, P. Golle, M. Jakobsson, E. Shi, J. Staddon, R. Masuoka, and J. Molina. Controlling data in the cloud: outsourcing computation without outsourcing control. In Proc. CCSW, 2009.
11. R. A. Cochran and M. K. Reiter. Toward online verification of client behavior in distributed applications. In Proc. NDSS, 2013.
12. G. Coker, J. Guttman, P. Loscocco, A. Herzog, J. Millen, B. OHanlon, J. Ramsdell, A. Segall, J. Sheehy, and B. Sniffen. Principles of remote attestation. International Journal of Information Security, 10(2):63-81, 2011.
13. N. G. Duffield and M. Grossglauser. Trajectory sampling for direct traffic observation. IEEE/ACM Trans. Netw., 9(3):280-292, June 2001.
14. S. K. Fayazbakhsh, V. Sekar, M. Yu, and J. C. Mogul. FlowTags: enforcing network-wide policies in the presence of dynamic middlebox actions. In Proc. HotSDN, 2013.
15. R. Fonseca, G. Porter, R. H. Katz, S. Shenker, and I. Stoica. X-Trace: a pervasive network tracing framework. In Proc. NSDI, 2007.
16. A. Ghodsi, V. Sekar, M. Zaharia, and I. Stoica. Multi-resource fair queueing for packet processing. In Proc. SIGCOMM, 2012.
17. G. Gibb, H. Zeng, and N. McKeown. Outsourcing network functionality. In Proc. HotSDN, 2012.
18. A. Haeberlen, P. Aditya, R. Rodrigues, and P. Druschel. Accountable virtual machines. In Proc. OSDI, 2010.
19. S. Han, K. Jang, K. Park, and S. Moon. PacketShader: a gpu-accelerated software router. In Proc. SIGCOMM, 2010.
20. E. Keller, R. B. Lee, and J. Rexford. Accountability in hosted virtual networks. In Proc. VISA, 2009.
21. A. Li, X. Yang, S. Kandula, and M. Zhang. CloudCmp: comparing public cloud providers. In Proc. IMC, 2010.
22. J. Naous, M. Walfish, A. Nicolosi, D. Mazières, M. Miller, and A. Seehra. Verifying and enforcing network paths with ICING. In Proc. CoNext, 2011.
23. C. Reis, S. D. Gribble, T. Kohno, and N. C. Weaver. Detecting in-flight page changes with web tripwires. In Proc. NSDI, 2008.
24. N. Santos, K. P. Gummadi, and R. Rodrigues. Towards trusted cloud computing. In Proc. HotCloud, 2009.
25. V. Sekar and P. Maniatis. Verifiable resource accounting for cloud computing services. In Proc. CCSW, 2011.
26. J. Sherry, S. Hasan, C. Scott, A. Krishnamurthy, S. Ratnasamy, and V. Sekar. Making middleboxes someone else's problem: network processing as a cloud service. In Proc. SIGCOMM, 2012.
27. V. Vu, S. Setty, A. Blumberg, and M. Walfish. A hybrid architecture for interactive verifiable computation. In IEEE Symposium on Security and Privacy, 2013.
28. M. Walfish, J. Stribling, M. Krohn, H. Balakrishnan, R. Morris, and S. Shenker. Middleboxes no longer considered harmful. In Proc. OSDI, 2004.
29. X. Zhang, A. Jain, and A. Perrig. Packet-dropping adversary identification for data plane security. In Proc. CoNext, 2008.