Deployment of Robust Security Scheme in SDN Based 5G Network over NFV Enabled Cloud Environment

In this chapter, we present a comprehensive end-to-end (E2E) network slicing framework for fifth-generation (5G) wireless and core networks and provide our vision on network slicing for beyond 5G (B5G) networks using artificial intelligence (AI) technologies. We first give an introduction on the 5G communication networks by specifying distinct 5G networking characteristics. As the key features of 5G pose challenges on quality-of-service (QoS)-oriented resource provisioning, a new concept of network slicing is presented, based on software-defined networking (SDN) and network function virtualization (NFV) technologies, to enhance the overall resource utilization while guaranteeing QoS isolation among services. We focus on developing specific network slicing solutions for both 5G wireless networks and core networks. In addition, the evolution of B5G networks is discussed in terms of a potential networking paradigm shift with new service key performance indicators (KPIs). To satisfy B5G service requirements, a framework of AI-assisted network slicing lifecycle is developed to automate the slice creation with reduced slice management complexity. A case study is presented to demonstrate the effectiveness of the proposed E2E network slicing solutions.Keywords5G communication networksNetwork slicingWireless networksRadio resource slicingCore networksComputing and transmission resource slicingBeyond 5G networksAI-assisted network slicingQoSE2E delay

The 5G network systems are evolving and have complex network infrastructures. There is a great deal of work in this area focused on meeting the stringent service requirements for the 5G networks. Within this context, security requirements play a critical role as 5G networks can support a range of services such as healthcare services, financial and critical infrastructures. 3GPP and ETSI have been developing security frameworks for 5G networks. Our work in 5G security has been focusing on the design of security architecture and mechanisms enabling dynamic establishment of secure and trusted end to end services as well as development of mechanisms to proactively detect and mitigate security attacks in virtualised network infrastructures. The focus of this paper is on the latter, namely the facilities and mechanisms, and the design of a security architecture providing facilities and mechanisms to detect and mitigate specific security attacks. We have developed and implemented a simplified version of the security architecture using Software Defined Networks (SDN) and Network Function Virtualisation (NFV) technologies. The specific security functions developed in this architecture can be directly integrated into the 5G core network facilities enhancing its security. We describe the design and implementation of the security architecture and demonstrate how it can efficiently mitigate specific types of attacks.

The discovery process of OPC Unified Architecture (OPC-UA) is well defined but lacks flexibility when implemented in large networks. While the standard provides concepts for local and global discovery services, the core assumption is that all clients and servers are aware of the discovery server(s) in the network. This dependency is a barrier for Plug-and-Play installations and is overcome by self announces via the multicast Domain Name System (mDNS), however, this scales badly with an increasing number of network nodes and deployed servers. We propose a discovery approach based on Software-Defined Networking (SDN) and Network Function Virtualization (NFV), that installs a plug-and-play mechanism for global OPC-UA discovery in modern virtualized networks.

5G networks represent a paradigm shift from their 4G predecessors, engineered to cater to the burgeoning demands of densely populated areas and the high data throughput requirements of the Internet of Things (IoT) and smart city infrastructures. Beyond enhancing fundamental network attributes such as reliability, availability, and security, 5G introduces architectural innovations to accommodate these advanced needs. This paper delves into the architectural nuances of 5G, focusing primarily on the Standalone (SA) deployment method, distinguished by its utilization of network slicing. This approach leverages cutting-edge virtual network technologies, including Software-Defined Networking (SDN) and Network Function Virtualization (NFV), to forge virtual network slices tailored to diverse consumer needs. Such customization is imperative for meeting the expansive and varied connectivity demands characteristic of 5G networks.To navigate the complexities of 5G architecture, this study advocates for the adoption of Reference Architectures (RAs), which provide a high-level abstraction framework for dissecting and understanding intricate systems. By proposing a model that outlines the standalone architecture of 5G networks, our research lays the groundwork for evolving this model into a comprehensive RA for 5G. This foundational work is instrumental in equipping system designers with the tools necessary for generalizing systems to manage design and deployment challenges effectively, as well as the heterogeneity inherent in system components. Additionally, our proposed model facilitates the establishment of a common vocabulary, promoting a coherent understanding of component interactions and offering a unified system perspective. Ultimately, this paper contributes a pivotal model that not only enhances our comprehension of 5G network architecture but also paves the way for future advancements in network design and deployment, promising to significantly impact the development of smart cities and IoT ecosystems.Keywords: 5G, 5G architecture, Reference architecture, patterns. Network slicing, Network Function Virtualization, Virtual Network Function.

Blockchain-enabled anonymous mutual authentication and location privacy-preserving scheme for [formula omitted] networks

Securing massive IoT in 6G: Recent solutions, architectures, future directions

In order to meet the traffic demand from diverse next generation wireless network applications and exponentially increasing mobile subscriptions, various 5G network architectures are proposed by leveraging Software Defined Networking (SDN) and Network Function Virtualization (NFV) technologies. Network slicing will be one of the 5G technologies that would support next-generation wireless applications over a shared network infrastructure. However, improper network slicing may lead to either over-provisioning or under-utilization of the underlying network infrastructure resources, especially the 5G core network. Over-provisioning of data plane components such as Serving Gateway (SGW) and Packet Data Network Gateway (PGW) can lead to higher CAPEX and OPEX to mobile operators. In this paper, we propose a novel auto-scaling approach called Bit rate Aware Auto Scaling (BAAS) that maintains a precise UE bit rate requirement in the network slices without over-provisioning of data plane resources.

Technical network challenges in 5G relates to handover authentication, user privacy protection and resource management. Due to interoperability requirements among the heterogeneous networks (Hetnets), the security requirements for 5G are high compared to 2G, 3G and 4G. The current 5G handover protocols are based on either fuzzy logic (FL), artificial neural networks (ANN), blockchain, software defined network (SDN), or Multi-layer Feed Forward Network (MFNN). These protocols have either long latencies or focus on either security or quality of services parameters such as user satisfaction. The usage of these inefficient authentication schemes during 5G handovers lead to performance degradation in heterogeneous cells and increases the delay. In addition, 5G networks experience frequent handover failures and increased handover delays. Consequently, the provision of strong security, privacy and low latency handovers is required for the successful deployment of 5G networks such as 5G wireless local area networks (5G-WLAN) heterogeneous networks. These new requirements, coupled with demands for higher scalability, reliability, security, data rates, quality of service (QoS), and support for internet of everything (IoE) have seen the shift from 5G to beyond 5G (B5G). However, 5G and B5G are incapable of providing the complete requirements of IoE such as enhanced security and QoS. This paper sought to develop an ANN-FL protocol that addressed both security and QoS in 5G and B5G networks. The simulation results showed that the developed protocol was robust against attacks such de-synchronization and tracing attacks and yielded a 27.1% increase in handover success rate, a 27.3% reduction in handover failure rate, and a 24.1% reduction in ping pong handovers.Keywords5GHetnetsAuthenticationPing pong rateHandover success rateHandover failure rates

It is our great pleasure to welcome you to the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization - SDN-NFV Security'18. SDN-NFV Security'18 offers a unique opportunity by bringing together researchers from academic, industry, as well as government agencies to discuss security challenges faced by two emerging networking paradigms, Software-Defined Networking (SDN) and Network Function Virtualization (NFV). SDN-NFV Security'18 solicits the submission of original unpublished ideas in 6-page long papers and 4-page short papers that address the latest practices, experiences, and lessons learned on SDN and NFV security. The call for papers attracted submissions from Europe and the United States. SDN-NFV Security'18 accepted 3 full papers be presented in this workshop, after a rigorous review process (at least 4 reviews for each paper) and discussion phase. In addition, we have invited 8 papers (5 full papers and 3 short papers) from domain experts to be presented in the workshop.

In this era wireless technology gaining more popularity, people prefer wireless communication over wired communication due to mobility, scalability and ease of access. However, the traditional wireless network is complex, vendor dependent and inadequate feasibility to incorporate new services, protocols, and APIs. The rapid growth in wireless network raises many thoughtful challenges for network and telecom operators. On such grounds, Innovation of Software Defined Network (SDN) and network function virtualization (NFV) for mobile network opens a new arena of research. This research article presents future mobile Internet architecture (FMIA) with the integration of twin technologies, SDN and NFV that enable rapid access to Internet services. Moreover, the network manager can control services provided by ISPs through proposed architecture.

5G networks control new technical concepts like ultra-low latency, ultra-high bandwidth, ultra-reliability, ultra-massive device access and manage the continually rising demands of diverse applications. The architecture and hierarchical framework of 5G networks need to understand and introduced. Security has been a primary focus for many telecommunications businesses since risks might have serious consequences for their front-line applications. A new class of security issues will be raised by network softwarization and new technologies including software-defined networking, network function virtualization, mobile-access edge computing and network slicing. This paper emphasizes the security concerns that 5G will raise and demands urgent security fixes. We also discuss the future of safe 5G systems and security fixes for these problems. To increase network security, DDOS attacks are detected and mitigated using a variety of SDN approaches.

SummaryIn 5G networks, mobile network and service functions run as software on general‐purpose servers that are distributed across remote sites. Dedicated networks, such as Internet of Things (IoT) network, disaster network, and immersive media network, are virtualized as software solutions on common hardware equipment. This means a new network can be easily provisioned by modifying the configurations of the network based on software‐defined networking (SDN) and network functions virtualization (NFV). Furthermore, the 5G core network architecture toward flat architecture with distributed cloud is a key solution for providing service flexibility and scalability in order to handle an explosive increase in mobile data traffic. To create heterogeneous networks and services on 5G networks, we propose a location‐aware network virtualization method that aims at minimizing the network load and resource cost by appropriately selecting the relevant cloud (including Virtual Machines (VMs), virtual network function [VNF] nodes, applications, and resources) and mobile core entities to provide the required virtual networking services that facilitate secure isolation of the virtual networks with automated resource convergence. In addition, we propose a selective mobility management scheme for service continuity in cases of user equipment (UE) handover. The numerical results show the trade‐off between the different cost factors, ie, network cost and service resources cost in terms of the number of deployed clouds on 5G core networks.

The rapid development of mobile networks and the growth of various types of devices connected to them has called forth the integrity and confidentiality ensuring of the transmitted data that now is a high-priority problem. The emergence of cryptocurrency was followed by renewal of interest in blockchain technology and the possibility of its use in various fields. The paper discusses currently existing methods of blockchain technology application in 5G networks in order to solve security problems, network connectivity and productivity improvement, as well as to develop new directions that expand the capabilities of services and applications in fifth-generation networks. The paper presents analysis of modern research works on the blockchain technology integration and key technologies used in the fifth-generation mobile networks. Particular attention is paid to applications of blockchain technology in cloud computing, edge computing, software-defined networking, virtualization of network functions, 5G-slicing and device-to-device communication. Based on the materials presented in the review, the options are outlined that blockchain technology can provide to 5G mobile networks and services through the use of a decentralized architecture and a smart contract algorithm. The materials of the proposed review is focused on the three main aspects: enhancement of transmitted information security, system performance and resources management. The paper can be useful to specialists and researchers working in the field of information security of the fifth-generation mobile networks, as well as for experts in the field of blockchain technology as an up-to-date overview of various applications of blockchain technology in the fifth-generation networks.

Software Defined Network (SDN) and Network Function Virtualization (NFV) are attracting the attention of telecom operators. The telecom environment requires a set of Carrier Grade requirements such as high availability, high throughput and low latency. SDN faces challenges to meet the Carrier Grade. Based on the JAIN SLEE component model and the Libfluid OpenFlow driver, this work proposes the CREDENCE SDN controller. Our evaluation shows that CREDENCE controller offers a higher throughput and a lower latency when is compared to ONOS and OpenDayLight.

5G will provide broadband access everywhere, entertain higher user mobility, and enable connectivity of massive number of devices (e.g. Internet of Things (IoT)) in an ultrareliable and affordable way. The main technological enablers such as cloud computing, Software Defined Networking (SDN) and Network Function Virtualization (NFV) are maturing towards their use in 5G. However, there are pressing security challenges in these technologies besides the growing concerns for user privacy. In this paper, we provide an overview of the security challenges in these technologies and the issues of privacy in 5G. Furthermore, we present security solutions to these challenges and future directions for secure 5G systems.