본문 바로가기
KERD
논문KCI 등재

Security in Network Virtualization: A Survey

박지수|손진곤|지승훈
한국정보처리학회|2021.08|JIPS(Journal of Information Processing Systems) (Journal of Information Processing Systems)|제17권 제4호|pp. 801-817|DOI 10.3745/JIPS.04.0220

1

조회

0

다운로드

0

인용

0

참고문헌

키워드

SecurityNFVSDNCloudNetwork VirtualizationNVO

초록

Network virtualization technologies have played efficient roles in deploying cloud, Internet of Things (IoT),big data, and 5G network. We have conducted a survey on network virtualization technologies, such assoftware-defined networking (SDN), network functions virtualization (NFV), and network virtualizationoverlay (NVO). For each of technologies, we have explained the comprehensive architectures, appliedtechnologies, and the advantages and disadvantages. Furthermore, this paper has provided a summarized viewof the latest research works on challenges and solutions of security issues mainly focused on DDoS attack andencryption.

Abstract

Network virtualization technologies have played efficient roles in deploying cloud, Internet of Things (IoT),big data, and 5G network. We have conducted a survey on network virtualization technologies, such assoftware-defined networking (SDN), network functions virtualization (NFV), and network virtualizationoverlay (NVO). For each of technologies, we have explained the comprehensive architectures, appliedtechnologies, and the advantages and disadvantages. Furthermore, this paper has provided a summarized viewof the latest research works on challenges and solutions of security issues mainly focused on DDoS attack andencryption.

참고문헌 (67)

  1. C. Clos, "A study of non-blocking switching networks", Bell System Technical Journal, 32(2), pp.406~424 (1953)
  2. M. F. Bari, "Data center network virtualization : a survey", IEEE Communications Surveys & Tutorials, 15(2), pp.909~928 (2012)
  3. R. Jain, "Network virtualization and software defined networking for cloud computing : a survey", IEEE Communications Magazine, 51(11), pp.24~31 (2013)
  4. S. Scott-Hayward, "SDN security: a survey", Proceedings of 2013 IEEE SDN for Future Networks and Services (SDN4FNS), pp.1~7 (2013)
  5. L. Schehlmann, "Blessing or curse? Revisiting security aspects of software-defined networking", Proceedings of the 10th International Conference on Network and Service Management (CNSM) and Workshop, pp.382~387 (2014)
  6. W. Xia, "A survey on software-defined networking", IEEE Communications Surveys & Tutorials, 17(1), pp.27~51 (2014)
  7. I. Ahmad, "Security in software defined networks : a survey", IEEE Communications Surveys & Tutorials, 17(4), pp.2317~2346 (2015)
  8. D. Kreutz, "Software-defined networking : a comprehensive survey", Proceedings of the IEEE, 103(1), pp.14~76 (2015)
  9. Z. Yao, "Security, Privacy and Anonymity in Computation, Communication and Storage", pp.319~332 (2016), Springer
  10. M. A. Nadeem, "A survey of cloud network overlay protocols", Proceedings of 2016 6th International Conference on Digital Information and Communication Technology and its Applications (DICTAP),, pp.177~182 (2016)
  11. A. Abdou, "Comparative analysis of control plane security of SDN and conventional networks", IEEE Communications Surveys & Tutorials, 20(4), pp.3542~3559 (2018)
  12. B. Yi, "A comprehensive survey of network function virtualization", Computer Networks, 133, pp.212~262 (2018)
  13. M. Pattaranantakul, "NFV security survey : from use case driven threat analysis to state-of-the-art countermeasures", IEEE Communications Surveys & Tutorials, 20(4), pp.3330~3368 (2018)
  14. A. M. Alwakeel, "A survey of network function virtualization security", Proceedings of the IEEE SoutheastCon, pp.1~8 (2018)
  15. Y. Liu, "A survey : typical security issues of software-defined networking", China Communications, 16(7), pp.13~31 (2019)
  16. "Software-Defined Networking (SDN) Definition" (2021)[URL]
  17. M. Casado, "SANE : a protection architecture for enterprise networks", Proceedings of the 15th USENIX Security Symposium (2006)
  18. M. Casado, "Ethane : taking control of the enterprise", ACM SIGCOMM Computer Communication Review, 37(4), pp.1~12 (2007)
  19. "What is Open vSwitch" (2016)[URL]
  20. B. Lantz, "A network in a laptop: rapid prototyping for software-defined networks", Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, pp.1~6 (2010)
  21. "OpenFlow Switch Specification version 1.5.1" (2015)[URL]
  22. N. McKeown, "OpenFlow : enabling innovation in campus networks", ACM SIGCOMM Computer Communication Review, 38(2), pp.69~74 (2008)
  23. R. Enns, "Network configuration protocol(NETCONF)", Internet Engineering Task Force, RFC6241, ~ (2011)
  24. M. Bjorklund, "YANG : a data modeling language for the network configuration protocol(NETCONF)", Internet Engineering Task Force, RFC6020, ~ (2010)
  25. R. T. Fielding, "Architectural styles and the design of network-based software architectures", Ph.D., pp.2000
  26. W. Zhou, "Requirements and Design Patterns for REST Northbound API in SDN", Internet Engineering Task Force, Internet Draft, ~ (2016)
  27. "Chef"[URL]
  28. "Puppet"[URL]
  29. "Ansible"[URL]
  30. S. Yoon, "Hiding MAC addresses for cyber security on software-defined networks", Proceedings of Symposium of the Korean Institute of Communications and Information Sciences (KICS),, pp.1452~1452 (2018)
  31. 원종혁, "IoT 계층별 보안위협 분석 및 대응기술 개선 방안 연구", 융합정보논문지, 8(6), pp.149~157 (2018), 중소기업융합학회[DOI]
  32. R. Sahay, "ArOMA : an SDN based autonomic DDoS mitigation framework", Computers & Security, 70, pp.482~499 (2017)
  33. S. Shirali-Shahreza, "Efficient implementation of security applications in OpenFlow controller with FleXam", Proceedings of 2013 IEEE 21st Annual Symposium on High-Performance Interconnects, pp.49~54 (2013)
  34. Meigen Huang, "FuzzyGuard: A DDoS attack prevention extension in software-defined wireless sensor networks", KSII Transactions on Internet and Information Systems, 13(7), pp.3671~3689 (2019), 한국인터넷정보학회
  35. Mingxin Wang, "A Moving Window Principal Components Analysis Based Anomaly Detection and Mitigation Approach in SDN Network", KSII Transactions on Internet and Information Systems, 12(8), pp.3946~3965 (2018), 한국인터넷정보학회[DOI]
  36. Qiang Wei, "An OpenFlow User-Switch Remapping Approach for DDoS Defense", KSII Transactions on Internet and Information Systems, 10(9), pp.4529~4548 (2016), 한국인터넷정보학회[DOI]
  37. Muhammad Afaq, "Large Flows Detection, Marking, and Mitigation based on sFlow Standard in SDN", 멀티미디어학회논문지, 18(2), pp.189~198 (2015), 한국멀티미디어학회[DOI]
  38. 방기현, "SDN 환경에서의 목적지 주소별 패킷 샘플링을 이용한 SYN Flooding 공격 방어기법", 멀티미디어학회논문지, 18(1), pp.35~41 (2015), 한국멀티미디어학회[DOI]
  39. Muhammad Nugraha, "Utilizing OpenFlow and sFlow to Detect and Mitigate SYN Flooding Attack", 멀티미디어학회논문지, 17(8), pp.988~994 (2014), 한국멀티미디어학회[DOI]
  40. S. Shin, "Avant-guard: scalable and vigilant switch flow management in software-defined networks", Proceedings of the 2013 ACM SIGSAC Conference on Computer &Communications Security, pp.413~424 (2013)
  41. M. Ambrosin, "LineSwitch : tackling control plane saturation attacks in software-defined networking", IEEE, 2016, pp.25(2), 1206~1219
  42. R. Mohammadi, "SLICOTS : an SDN-based lightweight countermeasure for TCP SYN flooding attacks", IEEE Transactions on Network and Service Management, 14(2), pp.487~497 (2017)
  43. K. Hong, "SDN-assisted slow HTTP DDoS attack defense method", IEEE Communications Letters, 22(4), pp.688~691 (2017)
  44. R. Deb, "Dynamic vulnerability assessments of software-defined networks", Innovations in Systems and Software Engineering, 16(1), pp.45~51 (2020)
  45. "Network Functions Virtualisation (NFV)" (2021)[URL]
  46. "What are virtual network functions or VNFs?" (2014)[URL]
  47. "Network Functions Virtualisation - Introductory White Paper" (2012)[URL]
  48. "Network Functions Virtualisation (NFV);Architectural Framework" (2014)[URL]
  49. "Open Platform for NFV (OPNFV) - technical overview"[URL]
  50. T. Park, "QoSE: quality of security a network security framework with distributed NFV", Proceedings of 2016 IEEE International Conference on Communications (ICC),, pp.1~6 (2016)
  51. S. Lal, "NFV : Security threats and best practices", IEEE Communications Magazine, 55(8), pp.211~217 (2017)
  52. C. C. Liu, "Recent Trends in Data Science and Soft Computing", pp.548~556 (2019), Springer
  53. 김현진, "인공지능 기술을 이용한 NFV 환경에서의 DDoS 공격 탐지 연구", 디지털콘텐츠학회논문지, 19(4), pp.837~844 (2018), 한국디지털콘텐츠학회[DOI]
  54. J. T. Kim, "Analysis on the VNF-DPI for the cloud security", Proceedings of Symposium of the Korean Institute of Communications and Information Sciences (KICS), pp.811~812 (2018)
  55. M. Pattaranantakul, "SecMANO: towards network functions virtualization (NFV) based security management and orchestration", Proceedings of 2016 IEEE Trustcom, ISPA, pp.2016[DOI]
  56. J. Jeong, "Applicability of interfaces to network security functions to network-based security services", Internet Engineering Task Force, Fremont, CA, draft-ietfi2nsf-applicability-10, ~ (2019)
  57. J. Hyun, "Technical research trends of network virtualization technologies", Proceedings of the Committee on Korean Network Operations and Management (KNOM) Conference (2016)
  58. T. Narten, "Problem statement : Overlays for network virtualization", Internet Engineering Task Force, ~ (2013)
  59. P. Garg, "NVGRE : network virtualization using generic routing encapsulation", Internet Engineering Task Force, ~ (2015)
  60. B. Davie, "A stateless transport tunneling protocol for network virtualization(STT)", Internet Engineering Task Force, ~ (2016)
  61. M. Mahalingam, "eXtensible Local Area Network (VXLAN): a framework for overlaying virtualized layer 2 networks over layer 3 networks", Internet Engineering Task Force, ~ (2014)
  62. J. Gross, "GENEVE : generic network virtualization encapsulation", Internet Engineering Task Force, ~ (2020)
  63. B. G. Jung, "Hyper-connected trust network technology", Electronics and Telecommunications Trends, 32(1), pp.35~45 (2017)
  64. "GRE over IPsec for secure tunneling" (2021)[URL]
  65. "FortiOS 6.2.3 (VXLAN over IPsec tunnel)" (2020)[URL]
  66. S. Boutros, "IPsec over Geneve Encapsulation", Internet Engineering Task Force, ~ (2018)
  67. "IEEE Standard for Local and metropolitan area networks – Media Access Control (MAC) security (IEEE Std 802.1AE)" (2018)[URL]

관련 논문AI추천

A Survey on Cyber Physical System Security for IoT: Issues, Challenges, Threats, Solutions김남용, 류정현, 박종혁, 박진호, Shailendra Rathore한국정보처리학회 · JIPS(Journal of Information Processing Systems)2018 · 제14권 제6호차세대 네트워크를 활용한 격리된 클라우드 보안 연구박재경, 이강호, 이원주한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2017 · 제22권 제11호NDynamic Framework for Secure VM Migration over Cloud ComputingSuresh B. Rathod, V. Krishna Reddy한국정보처리학회 · JIPS(Journal of Information Processing Systems)2017 · 제13권 제3호A Study on the Analysis of Security Requirements through Literature Review of Threat Factors of 5G Mobile Communication유진호, 추동균한국정보처리학회 · JIPS(Journal of Information Processing Systems)2024 · 제20권 제1호A Comprehensive Analyses of Intrusion Detection System for IoT Environment수실 쿠마르 싱, 박종혁, Jose Costa Sapalo Sicato, Shailendra Rathore한국정보처리학회 · JIPS(Journal of Information Processing Systems)2020 · 제16권 제4호Secure Vulnerability Detection and Enhancement for Lightweight Edge Authentication in SDN Environments변해원한국융합학회 · 미래기술융합논문지2025 · 제4권 제6호

이 간행물의 다른 논문 (11건)

High Rate Denial-of-Service Attack Detection System for Cloud Environment Using Flume and Spark이길흥, Janitza Punto Gutierrezpp. 675-689Alsat-2B/Sentinel-2 Imagery Classification Using the Hybrid Pigeon Inspired Optimization AlgorithmHadria Fizazi, Dounia Arezkipp. 690-706The Method for Generating Recommended Candidates through Prediction of Multi-Criteria Ratings Using CNN-BiLSTM신민찬, 이지훈, 박준희, 김진아, 문남미pp. 707-720A Joint Allocation Algorithm of Computing and Communication Resources Based on Reinforcement Learning in MEC SystemQinghua Liu, Qingping Lipp. 721-736Evaluation of Artificial Intelligence-Based Denoising Methods for Global IlluminationSoroor Malekmohammadi Faradounbeh, 김성기pp. 737-753
원문 보기