Detecting malicious middleboxes in service function chaining

초록

Service Function Chaining (SFC) has become a new and robust technology in computer network-ing, and takes advantage of both Software-Defined Networking (SDN) and Network Function Vir-tualization (NFV). However, SFC simultaneously inherited the vulnerabilities from SDN and NFV, especially the problem of malicious middleboxes. In this paper, we present a scheme that can detect malicious middleboxes in SFC by combining two mechanisms: direct and indirect. The direct mechanism injects a tool into the middleboxes to observe and report the state of each middlebox. In contrast, the indirect mechanism creates a probe service chain, which includes trustful middleboxes, to investigate the operation of other middleboxes in the network. Our experimental results show that the proposed system exhibits low resource consumption while achieving a high detection rate and accuracy. In addition, we demonstrate that the system is able to successfully detect malicious mid-dleboxes in SFC. © 2020, Innovative Information Science and Technology Research Group. All rights reserved.

키워드