An evaluation of a virtual network function for real-time threat detection using stream processing

Abstract : Network Function Virtualization (NFV) provides new opportunities for efficient and low-cost security solutions. Real-time traffic monitoring and fast security threat detection is a challenge to reduce the risk of great damages. In this paper, we propose a virtualized network function in an Open Source Platform for providing a real-time threat detection service. Our function combines cloud computing and distributed stream processing techniques to accurately and quickly detect threats. The proposed virtualized network function shows a good elasticity shrinking and scaling accordingly to the required load. The results show that the proposed function is able to scale dynamically, analyzing more than five million messages per second. In addition, the function easily migrates sensor elements to reduce latency, allowing the sensor to be located as near as possible to the client.
Document type :
Conference papers
Complete list of metadatas

https://hal.sorbonne-universite.fr/hal-02099026
Contributor : Guy Pujolle <>
Submitted on : Saturday, April 13, 2019 - 7:34:09 PM
Last modification on : Friday, July 5, 2019 - 3:26:03 PM

Identifiers

Citation

Martin Andreoni Lopez, Antonio Gonzalez Pastana Lobato, Otto Carlos M. B. Duarte, Guy Pujolle. An evaluation of a virtual network function for real-time threat detection using stream processing. 2018 Fourth International Conference on Mobile and Secure Services (MobiSecServ), Feb 2018, Miami Beach, United States. pp.1-5, ⟨10.1109/MOBISECSERV.2018.8311440⟩. ⟨hal-02099026⟩

Share

Metrics

Record views

32