Virtual network security: threats, countermeasures, and challenges

Journal of Internet Services and Applications

Volumn 6, Issue 1, 2015, Pages

  Bays, Leonardo Richter ^a   Oliveira, Rodrigo Ruas ^a   Barcellos, Marinho Pilla ^a   Gaspary, Luciano Paschoal ^a   Mauro Madeira, Edmundo Roberto ^b  

^a FEDERAL UNIVERSITY OF RIO GRANDE DO SUL   (Brazil)

^b UNIVERSITY OF CAMPINAS   (Brazil)

Author keywords

Countermeasures; Network virtualization; Security; Threats

Indexed keywords

MOBILE SECURITY; NETWORK ARCHITECTURE; RADAR COUNTERMEASURES; VIRTUAL REALITY;

NETWORK APPLICATIONS; NETWORK INFRASTRUCTURE; NETWORK VIRTUALIZATION; SECURITY; SECURITY ASPECTS; STATE OF THE ART; THREATS; VIRTUAL NETWORKS;

NETWORK SECURITY;

EID: 84923247660     PISSN: 18674828     EISSN: 18690238     Source Type: Journal    
DOI: 10.1186/s13174-014-0015-z     Document Type: Article

References (41)

1. Chowdhury NMMK, Boutaba R (2010) A survey of network virtualization. Comput Netw 54(5): 862–876.
2. Fernandes N, Moreira MD, Moraes I, Ferraz L, Couto R, Carvalho HT, Campista M, Costa LK, Duarte OB (2011) Virtual networks: isolation, performance, and trends. Ann Telecommun 66(5–6): 339–355.
3. Anderson T, Peterson L, Shenker S, Turner J (2005) Overcoming the internet impasse through virtualization. Computer 38(4): 34–41.
4. Bays LR, Oliveira RR, Buriol LS, Barcellos MP, Gaspary LP (2014) A heuristic-based algorithm for privacy-oriented virtual network embedding In: IEEE/IFIP Network Operations and Management Symposium (NOMS). IEEE, Krakow, Poland.
5. Cabuk S, Dalton CI, Ramasamy H, Schunter M (2007) Towards automated provisioning of secure virtualized networks In: ACM Conference on Computer and Communications Security. New York, USA.
6. Yu S, Zhou W (2008) Entropy-based collaborative detection of ddos attacks on community networks In: IEEE International Conference on Pervasive Computing and Communications. IEEE Computer Society, Washington, DC, USA.
7. Oliveira RR, Marcon DS, Bays LR, Neves MC, Buriol LS, Gaspary LP, Barcellos MP (2013) No more backups: Toward efficient embedding of survivable virtual networks In: IEEE International Conference on Communications. IEEE, Budapest, Hungary.
8. LAN/MAN Standards Committee (2006) IEEE Standard for Local and metropolitan area networks – Virtual Bridged Local Area Networks. IEEE Std 802.1Q-2005 (incorporates IEEE Std 802.1Q1998, IEEE Std 802.1u-2001, IEEE Std 802.1v-2001, and IEEE Std 802.1s-2002). http://www.ieee802.org/1/pages/802.1Q-2005.html.
9. Rosen E, Cisco Systems I, Rekhter Y, Juniper Networks I (2006) RFC 4364: BGP/MPLS IP Virtual Private Networks (VPNs). http://www.ietf.org/rfc/rfc4364.txt.
10. van Cleeff A, Pieters W, Wieringa RJ (2009) Security implications of virtualization: A literature study In: International Conference on Computational Science and Engineering. IEEE Computer Society, Washington, DC, USA.
11. McKeown N, Anderson T, Balakrishnan H, Parulkar G, Peterson L, Rexford J, Shenker S, Turner J (2008) Openflow: enabling innovation in campus networks. SIGCOMM Comput Commun Rev 38: 69–74.
12. Bari MF, Boutaba R, Esteves R, Granville LZ, Podlesny M, Rabbani MG, Zhang Q, Zhani MF (2013) Data center network virtualization: A survey. Communications Surveys Tutorials, IEEE 15: 909–928.
13. Zhou M, Zhang R, Xie W, Qian W, Zhou A (2010) Security and privacy in cloud computing: A survey In: Semantics Knowledge and Grid (SKG), 2010 Sixth International Conference On. IEEE, Beijing, China.
14. Hashizume K, Rosado DG, Fernández-Medina E, Fernandez EB (2013) An analysis of security issues for cloud computing. J Internet Serv Appl 4: 1–13.
15. Scott-Hayward S, O’Callaghan G, Sezer S (2013) Sdn security: A survey In: Future Networks and Services (SDN4FNS), 2013 IEEE SDN For. IEEE, Trento, Italy.
16. Shirey R (2000) RFC 2828: Internet Security Glossary. http://www.ietf.org/rfc/rfc2828.txt.
17. Stallings W (2006) Cryptography and Network Security: Principles and Practice. Pearson/Prentice Hall, Upper Saddle River, New Jersey, USA.
18. Cavalcanti E, Assis L, Gaudencio M, Cirne W, Brasileiro F (2006) Sandboxing for a free-to-join grid with support for secure site-wide storage area In: International Workshop on Virtualization Technology in Distributed Computing. IEEE Computer Society, Washington, USA.
19. Wolinsky DI, Agrawal A, Boykin PO, Davis JR, Ganguly A, Paramygin V, Sheng YP, Figueiredo RJ (2006) On the design of virtual machine sandboxes for distributed computing in wide-area overlays of virtual workstations In: International Workshop on Virtualization Technology in Distributed Computing. IEEE Computer Society, Washington, DC, USA.
20. Wu H, Ding Y, Winer C, Yao L (2010) Network security for virtual machine in cloud computing In: Computer Sciences and Convergence Information Technology (ICCIT), 2010 5th International Conference On. IEEE, Seoul, South Korea.
21. Cui Q, Shi W, Wang Y (2009) Design and implementation of a network supporting environment for virtual experimental platforms In: WRI International Conference on Communications and Mobile Computing. IEEE Computer Society, Washington, DC, USA.
22. Huang D, Ata S, Medhi D (2010) Establishing secure virtual trust routing and provisioning domains for future internet In: IEEE Conference on Global Telecommunications, Miami, USA.
23. Pignolet Y-A, Schmid S, Tredan G (2013) Adversarial vnet embeddings: A threat for isps? In: IEEE INFOCOM. IEEE, Turin, Italy.
24. Fukushima M, Sugiyama K, Hasegawa T, Hasegawa T, Nakao A (2013) Minimum disclosure routing for network virtualization and its experimental evaluation. IEEE/ACM Trans NetwPP(99): 1839–1851.
25. Chowdhury NMMK, Zaheer F-E, Boutaba R (2009) imark: an identity management framework for network virtualization environment In: IFIP/IEEE International Symposium on Integrated Network Management. IEEE Press, Piscataway, USA.
26. Fernandes NC, Duarte OCMB (2011) Xnetmon: A network monitor for securing virtual networks In: IEEE International Conference on Communications. IEEE, Kyoto, Japan.
27. Zhang Y, Gao L, Wang C (2009) Multinet: multiple virtual networks for a reliable live streaming service In: IEEE Conference on Global Telecommunications. IEEE Press, Piscataway, USA.
28. Marquezan CC, Granville LZ, Nunzi G, Brunner M (2010) Distributed autonomic resource management for network virtualization In: IEEE/IFIP Network Operations and Management Symposium, Osaka, Japan.
29. Wu Q, Shanbhag S, Wolf T (2010) Fair multithreading on packet processors for scalable network virtualization In: ACM/IEEE Symposium on Architectures for Networking and Communications Systems. ACM, New York, USA.
30. Kokku R, Mahindra R, Zhang H, Rangarajan S (2010) Nvs: a virtualization substrate for wimax networks In: International Conference on Mobile Computing and Networking. ACM, New York, USA.
31. Fernandes NC, Duarte OCMB (2011) Provendo isolamento e qualidade de serviço em redes virtuais In: Simpósio Brasileiro de Redes de Computadores e Sistemas Distribuídos, Campo Grande, Brazil. (in Portuguese).
32. Yeow W-L, Westphal C, Kozat UC (2011) Designing and embedding reliable virtual infrastructures. SIGCOMM Comput Commun Rev 41(2): 57–64.
33. Chen Q, Wan Y, Qiu X, Li W, Xiao A (2014) A survivable virtual network embedding scheme based on load balancing and reconfiguration In: IEEE Network Operations and Management Symposium. IEEE, Krakow, Poland.
34. Zhang Q, Zhani MF, Jabri M, Boutaba R (2014) Venice: Reliable virtual data center embedding in clouds In: IEEE INFOCOM. IEEE, Toronto, Canada.
35. Meixner CC, Dikbiyik F, Tornatore M, Chuah C, Mukherjee B (2013) Disaster-resilient virtual-network mapping and adaptation in optical networks In: International Conference on Optical Network Design and Modeling.
36. Roschke S, Cheng F, Meinel C (2009) Intrusion detection in the cloud In: IEEE International Conference on Dependable, Autonomic and Secure Computing. IEEE Computer Society, Washington, DC, USA.
37. Common Vulnerabilities and Exposures (2012) CVE-2012-1516. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1516.
38. Common Vulnerabilities and Exposures (2012) CVE-2012-1517. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1517.
39. Common Vulnerabilities and Exposures (2012) CVE-2012-2449. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2449.
40. Common Vulnerabilities and Exposures (2012) CVE-2012-2450. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2450.
41. Alkmim GP, Batista DM, Fonseca NLS (2013) Mapping virtual networks onto substrate networks. J Internet Serv Appl 3(4): 1–15.