Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks

Pablo Salva-Garcia; Enrique Chirivella-Perez; Jorge Bernal Bernabe; Jose M. Alcaraz-Calero; Qi Wang

doi:10.1109/INFCOMW.2019.8845183

Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks

Pablo Salva-Garcia
, Enrique Chirivella-Perez
, Jorge Bernal Bernabe
, Jose M. Alcaraz-Calero
, Qi Wang

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

8 Citations (Scopus)

210 Downloads (Pure)

Abstract

Internet of Things (IoT) has emerged as the main enabler to deal with challenging use cases that require massive Machine-Type Communications (mMTC), and mMTC has been recognized as one of three use case types for the Fifth Generation (5G) and beyond networks. In IoT networks, it is prohibitive to rely on just one firewall where hundreds of thousands of rules need to be installed in order to provide security countermeasures to each of the IoT devices. To fill this gap, this paper proposes an automatic deployment of virtual firewalls by leveraging Network Function Virtualisation (NFV) Management and Orchestration (MANO) to protect NB-IoT mMTC communications. The main idea underneath is to use NFV to deal with efficient rule distribution across VNFs-based firewalls to achieve scalability in the number of managed IoT devices. Empirical results have validated the design and implementation of the proposed scheme and demonstrating its advantageous performance and scalability. In particular, the deployment time for this VNF-based firewall service is highlighted to meet the requirement of a 5G Key Performance Indicator (KPI).

Original language	English
Title of host publication	IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)
Publisher	IEEE
Pages	385-390
Number of pages	6
ISBN (Electronic)	9781728118789
ISBN (Print)	9781728117796
DOIs	https://doi.org/10.1109/INFCOMW.2019.8845183
Publication status	Published - 23 Sept 2019
Event	IEEE Conference on Computer Communications Workshops - Paris, France Duration: 29 Apr 2019 → 2 May 2019 https://infocom2019.ieee-infocom.org/

Conference

Conference	IEEE Conference on Computer Communications Workshops
Abbreviated title	IEEE INFOCOM
Country/Territory	France
City	Paris
Period	29/04/19 → 2/05/19
Internet address	https://infocom2019.ieee-infocom.org/

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 8 Decent Work and Economic Growth
SDG 9 Industry, Innovation, and Infrastructure
SDG 11 Sustainable Cities and Communities

Keywords

5G mobile communication
Security
Firewall
Automatic deployment
VNF
MANO
NFV

Access to Document

10.1109/INFCOMW.2019.8845183

2019 02 21 Salva-Garcia et al TowardsAccepted author manuscript, 793 KB

Cite this

@inproceedings{86bf84d6e7a244b98439eab1e864e963,

title = "Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks",

abstract = "Internet of Things (IoT) has emerged as the main enabler to deal with challenging use cases that require massive Machine-Type Communications (mMTC), and mMTC has been recognized as one of three use case types for the Fifth Generation (5G) and beyond networks. In IoT networks, it is prohibitive to rely on just one firewall where hundreds of thousands of rules need to be installed in order to provide security countermeasures to each of the IoT devices. To fill this gap, this paper proposes an automatic deployment of virtual firewalls by leveraging Network Function Virtualisation (NFV) Management and Orchestration (MANO) to protect NB-IoT mMTC communications. The main idea underneath is to use NFV to deal with efficient rule distribution across VNFs-based firewalls to achieve scalability in the number of managed IoT devices. Empirical results have validated the design and implementation of the proposed scheme and demonstrating its advantageous performance and scalability. In particular, the deployment time for this VNF-based firewall service is highlighted to meet the requirement of a 5G Key Performance Indicator (KPI).",

keywords = "5G mobile communication, Security, Firewall, Automatic deployment, VNF, MANO, NFV",

author = "Pablo Salva-Garcia and Enrique Chirivella-Perez and \{Bernal Bernabe\}, Jorge and Alcaraz-Calero, \{Jose M.\} and Qi Wang",

year = "2019",

month = sep,

day = "23",

doi = "10.1109/INFCOMW.2019.8845183",

language = "English",

isbn = "9781728117796",

pages = "385--390",

booktitle = "IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)",

publisher = "IEEE",

address = "United States",

note = " IEEE Conference on Computer Communications Workshops , IEEE INFOCOM ; Conference date: 29-04-2019 Through 02-05-2019",

url = "https://infocom2019.ieee-infocom.org/",

}

Salva-Garcia, P, Chirivella-Perez, E, Bernal Bernabe, J, Alcaraz-Calero, JM & Wang, Q 2019, Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks. in IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS). IEEE, pp. 385-390, IEEE Conference on Computer Communications Workshops , Paris, France, 29/04/19. https://doi.org/10.1109/INFCOMW.2019.8845183

Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks. / Salva-Garcia, Pablo; Chirivella-Perez, Enrique; Bernal Bernabe, Jorge et al.
IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS). IEEE, 2019. p. 385-390.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks

AU - Salva-Garcia, Pablo

AU - Chirivella-Perez, Enrique

AU - Bernal Bernabe, Jorge

AU - Alcaraz-Calero, Jose M.

AU - Wang, Qi

PY - 2019/9/23

Y1 - 2019/9/23

N2 - Internet of Things (IoT) has emerged as the main enabler to deal with challenging use cases that require massive Machine-Type Communications (mMTC), and mMTC has been recognized as one of three use case types for the Fifth Generation (5G) and beyond networks. In IoT networks, it is prohibitive to rely on just one firewall where hundreds of thousands of rules need to be installed in order to provide security countermeasures to each of the IoT devices. To fill this gap, this paper proposes an automatic deployment of virtual firewalls by leveraging Network Function Virtualisation (NFV) Management and Orchestration (MANO) to protect NB-IoT mMTC communications. The main idea underneath is to use NFV to deal with efficient rule distribution across VNFs-based firewalls to achieve scalability in the number of managed IoT devices. Empirical results have validated the design and implementation of the proposed scheme and demonstrating its advantageous performance and scalability. In particular, the deployment time for this VNF-based firewall service is highlighted to meet the requirement of a 5G Key Performance Indicator (KPI).

AB - Internet of Things (IoT) has emerged as the main enabler to deal with challenging use cases that require massive Machine-Type Communications (mMTC), and mMTC has been recognized as one of three use case types for the Fifth Generation (5G) and beyond networks. In IoT networks, it is prohibitive to rely on just one firewall where hundreds of thousands of rules need to be installed in order to provide security countermeasures to each of the IoT devices. To fill this gap, this paper proposes an automatic deployment of virtual firewalls by leveraging Network Function Virtualisation (NFV) Management and Orchestration (MANO) to protect NB-IoT mMTC communications. The main idea underneath is to use NFV to deal with efficient rule distribution across VNFs-based firewalls to achieve scalability in the number of managed IoT devices. Empirical results have validated the design and implementation of the proposed scheme and demonstrating its advantageous performance and scalability. In particular, the deployment time for this VNF-based firewall service is highlighted to meet the requirement of a 5G Key Performance Indicator (KPI).

KW - 5G mobile communication

KW - Security

KW - Firewall

KW - Automatic deployment

KW - VNF

KW - MANO

KW - NFV

U2 - 10.1109/INFCOMW.2019.8845183

DO - 10.1109/INFCOMW.2019.8845183

M3 - Conference contribution

SN - 9781728117796

SP - 385

EP - 390

BT - IEEE INFOCOM 2019 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)

PB - IEEE

T2 - IEEE Conference on Computer Communications Workshops

Y2 - 29 April 2019 through 2 May 2019

ER -

Towards automatic deployment of virtual firewalls to support secure mMTC in 5G networks

Abstract

Conference

UN SDGs

Keywords

Access to Document

Fingerprint

Cite this