5G network slicing using SDN and NFV: A survey of taxonomy, architectures and future challenges

The explosive rise of Internet of Things (IoT) systems have notably increased the potential attack surfaces for cybercriminals. Accounting for the features and constraints of IoT devices, traditional security countermeasures can be inefficient in dynamic IoT environments. In this vein, the advantages introduced by software defined networking (SDN) and network function virtualization (NFV) have the potential to reshape the landscape of cybersecurity for IoT systems. To this aim, we provide a comprehensive analysis of security features introduced by NFV and SDN, describing the manifold strategies able to monitor, protect, and react to IoT security threats. We also present lessons learned in the adoption of SDN/NFV-based protection approaches in IoT environments, comparing them with conventional security countermeasures. Finally, we deeply discuss the open challenges related to emerging SDN- and NFV-based security mechanisms, aiming to provide promising directives to conduct future research in this fervent area.

A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems

Simple Object Access Protocol と,その応用としてのソフトウェアの組み合わせについて (渡邉昭夫教授退任記念号)

Internet of Things (IoT) is an emerging technology that makes people’s lives smart by conquering a plethora of diverse application and service areas. In near future, the fifth-generation (5G) wireless networks provide the connectivity for this IoT ecosystem. It has been carefully designed to facilitate the exponential growth in the IoT field. Network slicing is one of the key technologies in the 5G architecture that has the ability to divide the physical network into multiple logical networks (i.e., slices) with different network characteristics. Therefore, network slicing is also a key enabler of realisation of IoT in 5G. Network slicing can satisfy the various networking demands by heterogeneous IoT applications via dedicated slices. In this survey, we present a comprehensive analysis of the exploitation of network slicing in IoT realisation. We discuss network slicing utilisation in different IoT application scenarios, along with the technical challenges that can be solved via network slicing. Furthermore, integration challenges and open research problems related to the network slicing in the IoT realisation are also discussed in this paper. Finally, we discuss the role of other emerging technologies and concepts, such as blockchain and Artificial Intelligence/Machine Learning (AI/ML) in network slicing and IoT integration.

https://researchrepository.ucd.ie/bitstream/10197/12083/2/IEEE_COMST_Slicing___IoT_survey__Final_Submission__%20%281%29.pdf

Survey on Network Slicing for Internet of Things Realization in 5G Networks

The European Telecommunications Standards Institute (ETSI) has introduced the paradigm of Multi-Access Edge Computing (MEC) to enable efficient and fast data processing in mobile networks. Among other technological requirements, security and privacy are significant factors in the realization of MEC deployments. In this paper, we analyse the security and privacy of the MEC system. We introduce a thorough investigation of the identification and the analysis of threat vectors in the ETSI standardized MEC architecture. Furthermore, we analyse the vulnerabilities leading to the identified threat vectors and propose potential security solutions to overcome these vulnerabilities. The privacy issues of MEC are also highlighted, and clear objectives for preserving privacy are defined. Finally, we present future directives to enhance the security and privacy of MEC services.

/pdf/survey-on-multi-access-edge-computing-security-and-privacy-5epo4z3o46.pdf

Survey on Multi-Access Edge Computing Security and Privacy

To be able to serve the traffic demand in today's mobile networks, more than 123.000 base stations (BSs) have been deployed by the different network providers in Germany. These BSs are working 24/7 and are dimensioned to serve capacity demand during busy hours. Currently no mechanisms for a load adaptive network reconfiguration are implemented. As a result, much energy is wasted during times in which the capacity demand is low. This paper describes an adaptive, context-aware, and technology-comprehensive system architecture for power management in modern radio networks. The results presented are developed within the project Communicate Green (ComGreen). A major goal of ComGreen is the development of a testbed in order to investigate and demonstrate the main achievements of the project. The aim of this paper is twofold: First, it highlights the ComGreen concepts for power management in heterogeneous radio networks. Second, a detailed description of the testbed is provided.

Energy optimisation in heterogeneous multi-RAT networks

Building on virtualization and programmability, 5G networks aim for concurrent support of application domains with different functional and QoS requirements, both across and within vertical domains. Towards these requirements, network slicing mechanisms allow the management and orchestration of the underlying pool of resources, typically within a single administrative domain. However, in several occasions, verticals are expected to have a large geographical footprint, often crossing the administrative borders of multiple network domains, placing a subsequent functional requirement for cross-domain orchestration. In this paper we describe our approach on cross-domain sliciNg operations for the case of Industrial Applications with strict and flexible QoS requirements, with a particular focus on Wind Power plant networks. We describe the design of our SDN-based orchestration TRL-7 prototype and further provide a detailed look on the testbed prepared for measurements in an operational Wind Power plant in Brande, Denmark.

/pdf/cross-domain-network-slicing-for-industrial-applications-2mzc1joby7.pdf

Cross-Domain Network Slicing for Industrial Applications

Crystal structure of VEGFR1 in complex with N-(4-Chlorophenyl)-2-((pyridin-4-ylmethyl)amino)benzamide

The innovative application of 5G core technologies, namely Software Defined Networking (SDN) and Network Function Virtualization (NFV), can help reduce capital and operational expenditures in industrial networks. Nevertheless, SDN expands the attack surface of the communication infrastructure, thus necessitating the introduction of additional security mechanisms. A wind park is a good example of an industrial application relying on a network with strict performance, security, and reliability requirements, and was chosen as a representative example of industrial systems. This work highlights the benefit of leveraging the flexibility of SDN/NFV-enabled networks to deploy enhanced, reactive security mechanisms for the protection of the industrial network, via the use of Service Function Chaining. Moreover, a proof of concept implementation of the reactive security framework for an industrial-grade wind park network is presented. The framework is equipped with SDN and Supervisory Control and Data Acquisition (SCADA) honeypots, modelled on (and deployable to) an actual, operating wind park, allowing continuous monitoring of the industrial network and detailed analysis of potential attacks, thus isolating attackers and enabling the assessment of their level of sophistication.

/pdf/a-reactive-security-framework-for-operational-wind-parks-4f2d068eqi.pdf

A Reactive Security Framework for operational wind parks using Service Function Chaining

Broadband wireless access networks have the potential to fulfil the vision of high-speed ubiquitous Internet access. Due to the unreliability and heterogeneity of the network, operators are particularly challenged to provide "Carrier Grade" services that ensure a secure, efficient and reliable access to users. This paper provides an overview of these challenges and presents a network architecture and overarching services that form a unified and reliable carrier grade wireless access network. Particular focus of the paper is on wireless mesh multihop networks as they are a viable solution to realise broadband wireless access flexibly and cost efficiently. Moreover, we describe a next-generation wireless access network testbed where the architecture and services will be deployed and provide initial simulation and measurement results.

Andreas Roos

Papers

Energy optimisation in heterogeneous multi-RAT networks

Cross-Domain Network Slicing for Industrial Applications

Crystal structure of VEGFR1 in complex with N-(4-Chlorophenyl)-2-((pyridin-4-ylmethyl)amino)benzamide

A Reactive Security Framework for operational wind parks using Service Function Chaining

Towards Carrier Grade Wireless Mesh Networks for Broadband Access