VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls

Juan Deng, Hongxin Hu, Hongda Li, Zhizhong Pan, Kuang Ching Wang, Gail-Joon Ahn, Jun Bi, Younghee Park

Research output: Chapter in Book/Report/Conference proceedingConference contribution

27 Scopus citations

Abstract

Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.

Original languageEnglish (US)
Title of host publication2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages107-114
Number of pages8
ISBN (Print)9781467368841
DOIs
StatePublished - Jan 19 2016
EventIEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015 - San Francisco, United States
Duration: Nov 18 2015Nov 21 2015

Other

OtherIEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
CountryUnited States
CitySan Francisco
Period11/18/1511/21/15

    Fingerprint

ASJC Scopus subject areas

  • Software
  • Computer Networks and Communications

Cite this

Deng, J., Hu, H., Li, H., Pan, Z., Wang, K. C., Ahn, G-J., Bi, J., & Park, Y. (2016). VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls. In 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015 (pp. 107-114). [7387414] Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/NFV-SDN.2015.7387414