TY - GEN
T1 - VNGuard
T2 - IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
AU - Deng, Juan
AU - Hu, Hongxin
AU - Li, Hongda
AU - Pan, Zhizhong
AU - Wang, Kuang Ching
AU - Ahn, Gail-Joon
AU - Bi, Jun
AU - Park, Younghee
N1 - Funding Information:
ACKNOWLEDGMENTS This work was partially supported by the grants from National Science Foundation (NSF-IIS-1527421, NSF-CNS-1537924 and NSF-CNS-1531127).
Publisher Copyright:
© 2015 IEEE.
PY - 2016/1/19
Y1 - 2016/1/19
N2 - Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.
AB - Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.
UR - http://www.scopus.com/inward/record.url?scp=84963613813&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84963613813&partnerID=8YFLogxK
U2 - 10.1109/NFV-SDN.2015.7387414
DO - 10.1109/NFV-SDN.2015.7387414
M3 - Conference contribution
AN - SCOPUS:84963613813
T3 - 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
SP - 107
EP - 114
BT - 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
PB - Institute of Electrical and Electronics Engineers Inc.
Y2 - 18 November 2015 through 21 November 2015
ER -