SecRouting: Secure Routing for Network Functions Virtualization (NFV) Technology

Abstract

The Network Functions Virtualization (NFV) technology is a network architecture that virtualizes traditional network services into virtualized network functions (VNFs) which are dependent on the reliability and security of standard hardware appliances (HAs). The mapping relationship between VNFs and HAs is very complicated, and designing secure routing for the multi-layer NFV network to defend against attacks such as Sybil attack is challenging. In this work, we first designed the mapping patterns of VNFs and HAs in the NFV network. Secondly, we propose a security capacity formulation model which profoundly relies on the mapping patterns. Thirdly, a new multi-path secure routing referred to as SecRouting is suggested to navigate data packets to avoid the Sybil attackers. Finally, we systematically evaluate the security capacity and traffic capacity of the proposed SecRouting compared with many baselines.