Private Processing of Outsourced Network Functions: Feasibility and Constructions

Select |




Print


Melis, Luca; Asghar, Hassan; De Cristofaro, Emiliano; Kaafar, Dali


2016-03-14


Conference Material


ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization


New Orleans, USA


39-44


With organizations increasingly willing to outsource their network functions (e.g., firewalls, traffic shapers and intrusion detection systems) to the cloud, aiming to reduce the cost and complexity of maintaining networking infrastructures, the industry including Cisco, Arista, Alcatel-Lucent and alike are offering network function virtualization (NFV)-based solutions. However, outsourcing network functions in its current setting implies that sensitive network policies, such as firewall rules, are revealed to the cloud provider. In this paper, we investigate the use of cryptographic primitives for processing outsourced network functions, so that the provider does not learn any sensitive information. We present a cryptographic treatment of privacy-preserving outsourcing of network functions, introducing security definitions as well as an abstract model of generic network functions, and then propose a few instantiations using partial homomorphic encryption and public-key encryption with keyword search. We show a proof-of-concept implementation of our constructions and show that network functions can be privately processed by an untrusted cloud provider in a few milliseconds.


ACM Press


Network function virtualization, security, cryptography


http://honeynet.asu.edu/sdnnfvsec2016


English


nicta:9143


Melis, Luca; Asghar, Hassan; De Cristofaro, Emiliano; Kaafar, Dali. Private Processing of Outsourced Network Functions: Feasibility and Constructions. In: ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization; New Orleans, USA. ACM Press; 2016-03-14. 39-44. http://hdl.handle.net/102.100.100/90719?index=1



Loading citation data...

Citation counts
(Requires subscription to view)