VNGuard

An NFV/SDN combination framework for provisioning and managing virtual firewalls

Juan Deng, Hongxin Hu, Hongda Li, Zhizhong Pan, Kuang Ching Wang, Gail-Joon Ahn, Jun Bi, Younghee Park

Research output: Chapter in Book/Report/Conference proceedingConference contribution

24 Citations (Scopus)

Abstract

Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.

Original languageEnglish (US)
Title of host publication2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages107-114
Number of pages8
ISBN (Print)9781467368841
DOIs
StatePublished - Jan 19 2016
EventIEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015 - San Francisco, United States
Duration: Nov 18 2015Nov 21 2015

Other

OtherIEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015
CountryUnited States
CitySan Francisco
Period11/18/1511/21/15

Fingerprint

Computer system firewalls
Topology
Network function virtualization
Software defined networking

ASJC Scopus subject areas

  • Software
  • Computer Networks and Communications

Cite this

Deng, J., Hu, H., Li, H., Pan, Z., Wang, K. C., Ahn, G-J., ... Park, Y. (2016). VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls. In 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015 (pp. 107-114). [7387414] Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/NFV-SDN.2015.7387414

VNGuard : An NFV/SDN combination framework for provisioning and managing virtual firewalls. / Deng, Juan; Hu, Hongxin; Li, Hongda; Pan, Zhizhong; Wang, Kuang Ching; Ahn, Gail-Joon; Bi, Jun; Park, Younghee.

2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015. Institute of Electrical and Electronics Engineers Inc., 2016. p. 107-114 7387414.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Deng, J, Hu, H, Li, H, Pan, Z, Wang, KC, Ahn, G-J, Bi, J & Park, Y 2016, VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls. in 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015., 7387414, Institute of Electrical and Electronics Engineers Inc., pp. 107-114, IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015, San Francisco, United States, 11/18/15. https://doi.org/10.1109/NFV-SDN.2015.7387414
Deng J, Hu H, Li H, Pan Z, Wang KC, Ahn G-J et al. VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls. In 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015. Institute of Electrical and Electronics Engineers Inc. 2016. p. 107-114. 7387414 https://doi.org/10.1109/NFV-SDN.2015.7387414
Deng, Juan ; Hu, Hongxin ; Li, Hongda ; Pan, Zhizhong ; Wang, Kuang Ching ; Ahn, Gail-Joon ; Bi, Jun ; Park, Younghee. / VNGuard : An NFV/SDN combination framework for provisioning and managing virtual firewalls. 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015. Institute of Electrical and Electronics Engineers Inc., 2016. pp. 107-114
@inproceedings{6741011b1bd04845ba8a5453642dd1bf,
title = "VNGuard: An NFV/SDN combination framework for provisioning and managing virtual firewalls",
abstract = "Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.",
author = "Juan Deng and Hongxin Hu and Hongda Li and Zhizhong Pan and Wang, {Kuang Ching} and Gail-Joon Ahn and Jun Bi and Younghee Park",
year = "2016",
month = "1",
day = "19",
doi = "10.1109/NFV-SDN.2015.7387414",
language = "English (US)",
isbn = "9781467368841",
pages = "107--114",
booktitle = "2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015",
publisher = "Institute of Electrical and Electronics Engineers Inc.",

}

TY - GEN

T1 - VNGuard

T2 - An NFV/SDN combination framework for provisioning and managing virtual firewalls

AU - Deng, Juan

AU - Hu, Hongxin

AU - Li, Hongda

AU - Pan, Zhizhong

AU - Wang, Kuang Ching

AU - Ahn, Gail-Joon

AU - Bi, Jun

AU - Park, Younghee

PY - 2016/1/19

Y1 - 2016/1/19

N2 - Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.

AB - Network Function Virtualization (NFV) together with cloud technology enables users to request creating flexible virtual networks (VNs). Users also have specific security requirements to protect their VNs. Especially, due to changeable network perimeters, constant VM migrations, and user-centric security needs, VNs require new security features that traditional firewalls fail to provide, because traditional firewalls rely greatly on restricted network topology and entry points to provide effective security protection. To address this challenge, we propose VNGuard, a framework for effective provision and management of virtual firewalls to safeguard VNs, leveraging features provided by NFV and Software Defined Networking (SDN). VNGuard defines a high-level firewall policy language, finds optimal virtual firewall placement, and adapts virtual firewalls to VN changes. To demonstrate the feasibility of our approach, we have implemented core components of VNGuard on top of ClickOS. Our experimental results demonstrate the effectiveness and efficiency of virtual firewalls built on VNGuard.

UR - http://www.scopus.com/inward/record.url?scp=84963613813&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84963613813&partnerID=8YFLogxK

U2 - 10.1109/NFV-SDN.2015.7387414

DO - 10.1109/NFV-SDN.2015.7387414

M3 - Conference contribution

SN - 9781467368841

SP - 107

EP - 114

BT - 2015 IEEE Conference on Network Function Virtualization and Software Defined Network, NFV-SDN 2015

PB - Institute of Electrical and Electronics Engineers Inc.

ER -