poster

Public Access

Poster: On the Safety and Efficiency of Virtual Firewall Elasticity Control

Authors:

Wonkyu HanAuthors Info & Claims

SACMAT '17 Abstracts: Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies

Pages 129 - 131

https://doi.org/10.1145/3078861.3084166

Published: 07 June 2017 Publication History

PDF eReader

Abstract

Firewalls have been typically used to enforce network access control. Network Functions Virtualization (NFV) envisions to implement firewall function as software instance (a.k.a virtual firewall). Virtual firewall provides great flexibility and elasticity, which are necessary to protect virtualized environments. In this poster, we propose an innovative virtual firewall controller, VFW Controller, which enables safe, efficient and cost-effective virtual firewall elasticity control. In addition, we implement the core components of VFW Controller on top of NFV and SDN environments. Our experimental results demonstrate that VFW Controller is efficient to provide safe elasticity control of virtual firewalls.

References

[1]

Theophilus Benson, Aditya Akella, and David A Maltz. 2010. Network traffic characteristics of data centers in the wild. In Proceedings of the 10th ACM SIGCOMM conference on Internet measurement. ACM, 267--280.

Digital Library

Google Scholar

[2]

A. Gember-Jacobson and A. Akella. 2015. Improving the safety, scalability, and efficiency of network function state transfers. In ACM SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization.

Digital Library

Google Scholar

[3]

Aaron Gember-Jacobson, Raajay Viswanathan, Chaithan Prakash, Robert Grandl, Junaid Khalid, Sourav Das, and Aditya Akella. 2014. OpenNF: Enabling innovation in network function control. In Proceedings of the 2014 ACM Conference on SIGCOMM. 163--174.

Digital Library

Google Scholar

[4]

T. Benson and A. Anand and A. Akella and M. Zhang. 2009. Understanding data center traffic characteristics. In Proceeding of SIGCOMM Workshop on Research on Enterprise Networking. Barcelona, Spain.

Digital Library

Google Scholar

Cited By

View all

SHOJI ASHINJO Y(2023)Implementation method of non-bypassable PC application firewalls using virtualization technologies2023 IEEE International Conference on High Performance Computing & Communications, Data Science & Systems, Smart City & Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys)10.1109/HPCC-DSS-SmartCity-DependSys60770.2023.00066(435-442)Online publication date: 17-Dec-2023
https://doi.org/10.1109/HPCC-DSS-SmartCity-DependSys60770.2023.00066
Wang JHao SHu HZhao BLi HZhang WXu JLiu PMa J(2022)S-Blocks: Lightweight and Trusted Virtual Security Function With SGXIEEE Transactions on Cloud Computing10.1109/TCC.2020.298504510:2(1082-1099)Online publication date: 1-Apr-2022
https://doi.org/10.1109/TCC.2020.2985045
Li CLi JYang JLin J(2021)A novel workload scheduling framework for intrusion detection system in NFV scenarioComputers & Security10.1016/j.cose.2021.102271106(102271)Online publication date: Jul-2021
https://doi.org/10.1016/j.cose.2021.102271
Show More Cited By

Index Terms

Poster: On the Safety and Efficiency of Virtual Firewall Elasticity Control
1. Security and privacy

Recommendations

Mobiles Agents and Virtual Firewall to Secure the Shared Network for Virtual Machines in IaaS cloud
BDCA'17: Proceedings of the 2nd international Conference on Big Data, Cloud and Applications

Cloud computing is a new paradigm based on distributed services. It allows to reduce costs and simplify the management of resources. Positioning the cloud in an operational environment provides easy and quick access to computing resources anywhere, ...
The Challenges of Securing the Virtualized Environment

As virtualization has become more popular, concern over the technology's security has grown. Traditional security techniques often don't work well with virtualization, so vendors are trying different approaches.
Performance characterization and profiling of chained CPU-bound Virtual Network Functions
Abstract
The increased demand for high-quality Internet connectivity resulting from the growing number of connected devices and advanced services has put significant strain on telecommunication networks. In response, cutting-edge technologies ...

Comments

Information & Contributors

Information

Published In

SACMAT '17 Abstracts: Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies

June 2017

276 pages

ISBN:9781450347020

DOI:10.1145/3078861

General Chair:
Elisa Bertino
Purdue University, USA
,
Program Chairs:
Ravi Sandhu
University of Texas at San Antonio, USA
,
Edgar Weippl
SBA Research, Austria

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 07 June 2017

Check for updates

Author Tags

Qualifiers

Poster

Funding Sources

National Science Foundation

Conference

SACMAT'17

Sponsor:

SIGSAC

SACMAT'17: The 22nd ACM Symposium on Access Control Models and Technologies

June 21 - 23, 2017

Indiana, Indianapolis, USA

Acceptance Rates

SACMAT '17 Abstracts Paper Acceptance Rate 14 of 50 submissions, 28%;

Overall Acceptance Rate 177 of 597 submissions, 30%

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

4
Total Citations
View Citations
567
Total Downloads

Downloads (Last 12 months)86
Downloads (Last 6 weeks)32

Reflects downloads up to 10 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

SHOJI ASHINJO Y(2023)Implementation method of non-bypassable PC application firewalls using virtualization technologies2023 IEEE International Conference on High Performance Computing & Communications, Data Science & Systems, Smart City & Dependability in Sensor, Cloud & Big Data Systems & Application (HPCC/DSS/SmartCity/DependSys)10.1109/HPCC-DSS-SmartCity-DependSys60770.2023.00066(435-442)Online publication date: 17-Dec-2023
https://doi.org/10.1109/HPCC-DSS-SmartCity-DependSys60770.2023.00066
Wang JHao SHu HZhao BLi HZhang WXu JLiu PMa J(2022)S-Blocks: Lightweight and Trusted Virtual Security Function With SGXIEEE Transactions on Cloud Computing10.1109/TCC.2020.298504510:2(1082-1099)Online publication date: 1-Apr-2022
https://doi.org/10.1109/TCC.2020.2985045
Li CLi JYang JLin J(2021)A novel workload scheduling framework for intrusion detection system in NFV scenarioComputers & Security10.1016/j.cose.2021.102271106(102271)Online publication date: Jul-2021
https://doi.org/10.1016/j.cose.2021.102271
Gao SLi ZYao YXiao BGuo SYang YKim JAhn GKim SKim YLopez JKim T(2018)Software-Defined FirewallProceedings of the 2018 on Asia Conference on Computer and Communications Security10.1145/3196494.3196519(413-424)Online publication date: 29-May-2018
https://dl.acm.org/doi/10.1145/3196494.3196519

View Options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

Mobiles Agents and Virtual Firewall to Secure the Shared Network for Virtual Machines in IaaS cloud

The Challenges of Securing the Virtualized Environment

Performance characterization and profiling of chained CPU-bound Virtual Network Functions