Visible to the public Biblio

Filters: Keyword is virtualized network function  [Clear All Filters]
2017-03-08
Yasrebi, P., Monfared, S., Bannazadeh, H., Leon-Garcia, A..  2015.  Security function virtualization in software defined infrastructure. 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM). :778–781.

In this paper we present an approach to implement security as a Virtualized Network Function (VNF) that is implemented within a Software-Defined Infrastructure (SDI). We present a scalable, flexible, and seamless design for a Deep Packet Inspection (DPI) system for network intrusion detection and prevention. We discuss how our design introduces significant reductions in both capital and operational expenses (CAPEX and OPEX). As proof of concept, we describe an implementation for a modular security solution that uses the SAVI SDI testbed to first detect and then block an attack or to re-direct it to a honey-pot for further analysis. We discuss our testing methodology and provide measurement results for the test cases where an application faces various security attacks.