Towards a secure and lightweight network function virtualisation environment. (3rd February 2020)

• Record Type: Journal Article
• Authors: Benedictis, Marco De; Lioy, Antonio; Smiraglia, Paolo
• Is Part Of: International journal of grid and utility computing. Volume 11:Number 2(2020)
• Page Start: 243
• Page End: 252
• Publication Date: 2020-02-03
• Subjects: security -- lightweight virtualisation -- container -- network function virtualisation -- NFV -- mandatory access control -- SELinux -- Docker; Electronic data processing -- Distributed processing -- Periodicals; Electronic commerce -- Management -- Computer programs -- Periodicals; 004.605
• Languages: English
• ISSNs: 1741-847X

Abstract

Cloud computing has deeply affected the structure of modern ICT infrastructures. It represents an enabling technology for novel paradigms such as Network Function Virtualisation (NFV), which proposes the virtualisation of network functions to enhance the flexibility of networks and to reduce the costs of infrastructure management. Besides potential benefits, NFV inherits the limitations of traditional virtualisation where the isolation of resources comes at the cost of a performance overhead. Lightweight forms of virtualisation, like containers, aim to mitigate this limitation. Furthermore, they allow the agile composition of complex services. These characteristics make containers a suitable technology for NFV environment. A major concern towards the exploitation of containers is security. Since containers provide less isolation than virtual machines, they can expose the whole host to vulnerabilities. In this work, we investigate container-related threats and propose a secure design for a Virtual Network Function deployed in a lightweight NFV environment.