Abstract:Edge-assisted Internet of things applications often need to use cloud virtual network services to transmit data. However, the internal threats such as illegal management and configuration to cloud platform intentionally or unintentionally will lead to virtual network security problems such as malicious changes of user network and hijacked data flow. It will eventually affect edge-assisted Internet of things applications. We propose a virtual network internal threat detection method called VNGuarder in a cloud computing environment, which can effectively monitor whether the virtual network configuration of legitimate users under the IaaS cloud platform has been maliciously changed or destroyed by insiders. First, based on the life cycle of cloud virtual network services, we summarized two types of internal attacks involving illegal use of virtualization management tools and illegal invocation of virtual network-related processes. Second, based on normal behavior of tenants, a hierarchical trusted call correlation scheme is proposed to provide a basis for discovering that insiders illegally call virtualized management tools and virtual network-related processes on the controller node of the cloud platform or the network node and compute node. Third, a trace-enable mechanism combining real-time monitoring and log analysis is introduced. By collecting and recording the complete call process of virtual network management and configuration in the cloud platform, and comparing it with the result of the hierarchical trusted call correlation, abnormal operations can be reported to the tenants in time. Comprehensive simulation experiments on the Openstack platform show that VNGuarder can effectively detect illegal management and configuration of virtual networks by insiders without significantly affecting the creation time of tenant networks and the utilization of CPU and memory.

A Virtual Network Guard System Based on Cloud Computing Environments

VNGuarder: An Internal Threat Detection Approach for Virtual Network in Cloud Computing Environment

VNGuard: an NFV/SDN Combination Framework for Provisioning and Managing Virtual Firewalls.

The Implementation of Virtualization in Data Plane of For CES

On Application of Server Virtualization Technology in Campus Network Management

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

A Distributed and Autonomous Guard System Based on Cloud Environments

Sdn Based Vxlan Optimization In Cloud Computing Networks

Network View and Cognitive Mechanism for Virtual Network Resource Management Based Intelligent

ON VIRTUAL NETWORK ACCESS CONTROL BASED ON OPEN VSWITCH

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING

Analysis of a Secure Virtual Desktop Infrastructure System

A Novel Agent-Based Framework in Bridge-Mode Hypervisors of Cloud Security.

On Data and Virtualization Security Risks and Solutions of Cloud Computing.

SeVMM: VMM-Based Security Control Model

Virtual Switching Without a Hypervisor for a More Secure Cloud

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

Virtual network security: threats, countermeasures, and challenges

Data Security Risk and Preventive Measures of Virtual Cloud Server Based on Cloud Computing

VCP: A virtualization cloud platform for SDN intra-domain production network

Virtual Network Diagnosis As a Service