Title
Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm
Abstract
Opening-up sharing has prompted the multi-tenancy architecture, whereby different vendors (including outsourcees) work together with network operators to form a vibrant service ecosystem, resulting in several advantages as well as risks. In particular, the static nature of existing architectures in network functions virtualization-based (NFV-based) clouds facilitate hacking. Thus, much attention has been focused on determining how to avoid the uncontrollable cloud security induced by complex production relations and non-trustworthy software/hardware sources when the two sets of security risks intersect. In this article, we investigate latent persistent threats against cloud environments and determine a high degree of complementarity and consistency between the NFV-based cloud environment and the dynamic defense concept. More specifically, new NFV-based cloud features provide an effective implementation for dynamic defense, while the generalized robustness of dynamic defense theory allows for high security gains. Intrinsic cloud security (iCS) is then proposed to align NFV-based clouds, mimicking defense and the moving target defense (MTD) paradigm to implement a seamless integration and symbiosis evolution between security and NFV-based clouds. We quantify the impact on system overhead to account for efficiency and cost issues. The simulation analysis demonstrates that the enhanced mode is able to consistently obtain a more beneficial and stable defense compared with the counterparts.
Year
DOI
Venue
2022
10.1109/MWC.001.2100251
IEEE Wireless Communications
Keywords
DocType
Volume
network operators,vibrant service ecosystem,network functions virtualization-based clouds,security risks intersect,latent persistent threats,cloud environments,NFV-based cloud environment,dynamic defense concept,NFV-based cloud features,dynamic defense theory,high security gains,intrinsic cloud security,moving target defense paradigm,cloud-native network slicing,proactive defense paradigm,multitenancy architecture,NFV-based clouds
Journal
29
Issue
ISSN
Citations 
2
1536-1284
0
PageRank 
References 
Authors
0.34
7
5
Name
Order
Citations
PageRank
Qiang Wu130440.42
Ran Wang200.34
Xincheng Yan300.34
Chunming Wu416831.83
Rongxing Lu55091301.87