{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T18:41:55Z","timestamp":1772044915182,"version":"3.50.1"},"reference-count":162,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"Orange Research Labs","award":["G04261"],"award-info":[{"award-number":["G04261"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Commun. Surv. Tutorials"],"published-print":{"date-parts":[[2018]]},"DOI":"10.1109\/comst.2018.2859449","type":"journal-article","created":{"date-parts":[[2018,7,25]],"date-time":"2018-07-25T18:49:16Z","timestamp":1532544556000},"page":"3330-3368","source":"Crossref","is-referenced-by-count":89,"title":["NFV Security Survey: From Use Case Driven Threat Analysis to State-of-the-Art Countermeasures"],"prefix":"10.1109","volume":"20","author":[{"given":"Montida","family":"Pattaranantakul","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruan","family":"He","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qipeng","family":"Song","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0379-7089","authenticated-orcid":false,"given":"Zonghua","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9255-2114","authenticated-orcid":false,"given":"Ahmed","family":"Meddahi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","year":"2016","journal-title":"Open source software for creating private and public clouds"},{"key":"ref38","year":"2014"},{"key":"ref33","first-page":"61","article-title":"Survey of security problems in cloud computing virtual machines","author":"studnia","year":"2012","journal-title":"Proc C ESAR"},{"key":"ref32","first-page":"91","article-title":"CloudAV: N-version antivirus in the network cloud","author":"oberheide","year":"2008","journal-title":"Proc of SSN"},{"key":"ref31","first-page":"1","article-title":"Infrastructure as a service security: Challenges and solutions","author":"dawoud","year":"2010","journal-title":"Proc INFOS"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.07.002"},{"key":"ref37","author":"mckay","year":"2011","journal-title":"A Deep Dive Into Hyperjacking"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2012.17"},{"key":"ref35","year":"2017","journal-title":"Virtual Machine Escape Fetches 105 000 Dollars at Pwn20wn Hacking Contest"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600899"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1186\/1869-0238-4-5"},{"key":"ref27","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1145\/2480741.2480757","article-title":"A survey of security issues in hardware virtualization","volume":"45","author":"p\u00e9k","year":"2013","journal-title":"ACM Comput Surveys"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCES.2016.7821971"},{"key":"ref20","year":"2014","journal-title":"White Paper—Observation to NFV"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2749469.2750422"},{"key":"ref21","year":"2014"},{"key":"ref24","first-page":"107","article-title":"VNGuard: An NFV\/SDN combination framework for provisioning and managing virtual firewalls","author":"deng","year":"2015","journal-title":"Proc IEEE NFV-SDN"},{"key":"ref23","first-page":"129","article-title":"On the safety and efficiency of virtual firewall elasticity control","author":"deng","year":"2017","journal-title":"Proc NDSS"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/2245276.2245382"},{"key":"ref26","year":"2017"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1023\/A:1024600519144"},{"key":"ref25","year":"2014"},{"key":"ref50","first-page":"49","article-title":"Lessons learned from previous SSL\/TLS attacks—A brief chronology of attacks and weaknesses","author":"meyer","year":"2013","journal-title":"IACR Cryptology ePrint"},{"key":"ref51","first-page":"189","article-title":"SoK: Lessons learned from SSL\/TLS attacks","author":"meyer","year":"2014","journal-title":"Proc WISA"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/CSCN.2017.8088617"},{"key":"ref153","year":"2017"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2014.6940493"},{"key":"ref155","first-page":"61","article-title":"Towards secure building management system based on Internet of Things","author":"el-din mady","year":"2017","journal-title":"Proc CENICS"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2015.7387417"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1145\/2752952.2752977"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1145\/1063979.1064002"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2012.12.020"},{"key":"ref147","year":"2017"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1145\/2381913.2381924"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2015.7116145"},{"key":"ref59","author":"chayapathi","year":"2016","journal-title":"Network Functions Virtualization (NFV) With a Touch of SDN"},{"key":"ref58","year":"2016","journal-title":"White Paper Considerations for Securing SDN\/NFV"},{"key":"ref57","doi-asserted-by":"crossref","first-page":"276","DOI":"10.1016\/j.procs.2015.07.209","article-title":"Distributed control in virtualized networks","volume":"56","author":"zuccaro","year":"2015","journal-title":"Procedia Comput Sci"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.23919\/IFIPNetworking.2017.8264850"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.5121\/ijcsit.2013.5306"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2016.7502487"},{"key":"ref53","first-page":"1","article-title":"An analysis of the cloud computing security problem","author":"morsy","year":"2010","journal-title":"Proc APSEC"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2016.7502434"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3844\/jcssp.2014.23.33"},{"key":"ref162","author":"zong","year":"2014","journal-title":"Virtualized Network Function (VNF) Pool Problem Statement"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2006.1607877"},{"key":"ref160","author":"mcdowall","year":"2016","journal-title":"Inherent Security Design Patterns for SDN\/NFV Deployments"},{"key":"ref4","year":"2016","journal-title":"Network Functions Virtualization Market Worth Over 15B Dollars by 2020"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2477041"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2016.0115"},{"key":"ref5","year":"2018","journal-title":"The SDN NFV Network Virtualization Ecosystem 2016–2030—Opportunities Challenges Strategies Forcasts"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2014.7014200"},{"key":"ref8","year":"2016"},{"key":"ref49","author":"cox","year":"2010","journal-title":"PaaS Threats in the Cloud"},{"key":"ref7","author":"dutta","year":"2016","journal-title":"Security Challenges and Opportunities in SDN\/NFV Networks"},{"key":"ref157","author":"bernardos","year":"2016","journal-title":"Network Virtualization Research Challenges"},{"key":"ref158","author":"carrozzo","year":"2015","journal-title":"Network Function Virtualization Resource Orchestration Challenges"},{"key":"ref9","year":"2016"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-012-0168-x"},{"key":"ref45","year":"2016","journal-title":"Cloud Computing Top Threats in 2016"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.186"},{"key":"ref47","author":"markatos","year":"2008","journal-title":"Large Scale Attacks on the Internet Lessons Learned from the LOBSTER Project"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2015.44"},{"key":"ref41","year":"2017","journal-title":"Keystone the OpenStack Identity Service"},{"key":"ref44","author":"wueest","year":"2015","journal-title":"Mistakes in the IaaS Cloud Could Put Your Data at Risk"},{"key":"ref43","first-page":"38","article-title":"An analysis of security challenges in cloud computing","volume":"4","author":"parekh","year":"2013","journal-title":"Adv Comput Sci Appl"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/1456403.1456410"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046752"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/1357010.1352603"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/2070425.2070452"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.514"},{"key":"ref72","year":"2017","journal-title":"Open Network Automation Platform"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1145\/2600075.2600076"},{"key":"ref71","year":"2015","journal-title":"Cloudify Pure-Play NFV Management and Orchestration"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/1854099.1854138"},{"key":"ref70","year":"2016","journal-title":"OpenBaton Is a ETSI NFV Compliant Management and Orchestration (MANO) Framework"},{"key":"ref76","year":"2016","journal-title":"TOSCA Simple Profile for Network Functions Virtualization (NFV) Version 1 0"},{"key":"ref130","first-page":"1","article-title":"Commutative-like encryption: A new characterization of ElGamal","volume":"abs 1011 3718","author":"dai","year":"2010","journal-title":"CoRR"},{"key":"ref77","year":"2001","journal-title":"Ain’t Markup Language"},{"key":"ref74","year":"2017","journal-title":"Advanced Networked Agents for Security and Trust Assessment in CPS\/IoT Architectures"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3040992.3040995"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1145\/2020723.2020734"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1145\/2414456.2414489"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484383"},{"key":"ref78","year":"2016","journal-title":"Moon—Security Management Module"},{"key":"ref132","first-page":"117","article-title":"CloudSafetyNet: Detecting data leakage between cloud tenants","author":"priebe","year":"2014","journal-title":"Proc CCSW"},{"key":"ref79","first-page":"570","article-title":"SDAC: A new software-defined access control paradigm for cloud-based systems","author":"he","year":"2017","journal-title":"Proc ICICS"},{"key":"ref136","author":"myerson","year":"2014","journal-title":"Protect a PaaS From Hackers With Four Phases of Defense"},{"key":"ref135","doi-asserted-by":"crossref","first-page":"72","DOI":"10.1007\/978-3-319-09770-1_7","article-title":"A private walk in the clouds: Using end-to-end encryption between cloud applications in a personal domain","volume":"8647","author":"song","year":"2014","journal-title":"Trust Privacy and Security in Digital Business"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2016.2570752"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1147\/JRD.2009.5429060"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2016.2601009"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN.2017.7899394"},{"key":"ref62","year":"2015","journal-title":"Threat landscape and good practice guide for software defined networks\/5g"},{"key":"ref61","author":"macaulay","year":"2013","journal-title":"The 7 Deadly Threats to 4G 4G LTE Security Roadmap and Reference Design"},{"key":"ref63","author":"paganini","year":"2013","journal-title":"Hardware Attacks Backdoors and Electronic Component Qualification"},{"key":"ref64","author":"lemke","year":"2014","journal-title":"How to Manage Security in NFV Environment"},{"key":"ref140","year":"2016","journal-title":"Security Position Paper Network Function Virtualization"},{"key":"ref65","first-page":"817","article-title":"Bohatei: Flexible and elastic DDoS defense","author":"fayaz","year":"2015","journal-title":"Proc SEC"},{"key":"ref141","year":"2017"},{"key":"ref66","year":"2013","journal-title":"Taking NFV to the Cloud"},{"key":"ref142","author":"bloom","year":"2012","journal-title":"Chapter 12 Hardware and Security—Vulnerabilities and Solutions"},{"key":"ref67","year":"2014","journal-title":"CloudBand 3 0 The Production Platform for NFV"},{"key":"ref143","year":"2017","journal-title":"Open platform for nfv project"},{"key":"ref68","year":"2015","journal-title":"OpenMano"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2016.7919468"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7045396"},{"key":"ref69","year":"2013","journal-title":"Tacker OpenStack NFV Orchestration"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1145\/2479871.2479929"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2013.6658648"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1145\/2600075.2600078"},{"key":"ref95","year":"2016","journal-title":"VXLAN Design and Deployment"},{"key":"ref108","first-page":"191","article-title":"A virtual machine introspection based architecture for intrusion detection","author":"garfinkel","year":"2003","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref94","year":"2012","journal-title":"Understanding and Configuring VLANs"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/ICNSS.2011.6059967"},{"key":"ref93","author":"wraight","year":"2010","journal-title":"White Paper Content-Aware Identity & Access Management in a Virtual Environment"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1145\/2627566.2627579"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6749"},{"key":"ref105","author":"han","year":"2005","journal-title":"Data Mining Concepts and Techniques"},{"key":"ref91","year":"2014","journal-title":"Welcome to openid connect"},{"key":"ref104","author":"roesch","year":"2014","journal-title":"SNORT"},{"key":"ref90","year":"2014","journal-title":"Security Assertion Markup Language (SAML) V2 0 Technical Overview"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2388576.2388585"},{"key":"ref102","year":"2016","journal-title":"The Bro Network Security Monitor"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/SAINTW.2005.1619969"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/1999732.1999735"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2662392"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1986.25"},{"key":"ref99","author":"rabin","year":"2005","journal-title":"How to Exchange Secrets with Oblivious Transfer"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382232"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787502"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2015.2499271"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1587\/transcom.2016NNI0001"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2016.7378433"},{"key":"ref13","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1145\/2377677.2377680","article-title":"Making middleboxes someone else’s problem: Network processing as a cloud service","author":"sherry","year":"2012","journal-title":"Proc SIGCOMM"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486022"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2453936"},{"key":"ref118","year":"2015","journal-title":"POX Wiki"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2491686"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/1567253.1567258"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2013.6761310"},{"key":"ref17","article-title":"Design and implementation of a consolidated middlebox architecture","author":"sekar","year":"2012","journal-title":"Proc NSDI"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128850"},{"key":"ref18","year":"2017","journal-title":"Business White Paper The Reality of Cost Reduction (Rev 2)"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2484402.2484412"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/1341312.1341321"},{"key":"ref19","year":"2015","journal-title":"The Evolution of SDN and NFV Orchestration"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/1936254.1936274"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2010.39"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/2046614.2046624"},{"key":"ref116","year":"2015","journal-title":"Installation and Upgrade Guide"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/1292491.1292506"},{"key":"ref115","year":"2014","journal-title":"Flexible Workload Mobility and Server Placement With VXLAN Routing on Cisco CSR 1000V and Cisco Nexus 1000V"},{"key":"ref120","article-title":"sHype: Secure hypervisor approach to trusted virtualized systems","author":"sailer","year":"2005"},{"key":"ref89","year":"2014","journal-title":"Toward a Federated Identity Service Based on Virutalization"},{"key":"ref121","year":"2009","journal-title":"Network Virtualization-Path Isolation Design Guide"},{"key":"ref122","year":"2014","journal-title":"Virtual Routing and Forwarding"},{"key":"ref123","author":"rouiller","year":"2012","journal-title":"Virtual LAN Security Weaknesses and Countermeasures"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/ISCID.2014.221"},{"key":"ref86","first-page":"1","article-title":"Deploying a virtual network function over a software defined network infrastructure: Experiences deploying an access control VNF in the university of Basque Country’s OpenFlow enabled facility","author":"jacob","year":"2014","journal-title":"Proceedings of TNC"},{"key":"ref87","year":"2012","journal-title":"Hostapd IEEE 802 11 AP IEEE 802 1X\/ WPA\/ WPA2\/ EAP\/ RADIUS Authenticator"},{"key":"ref88","year":"2012","journal-title":"Linux WPA\/WPA2\/IEEE 802 1X Supplicant"}],"container-title":["IEEE Communications Surveys & Tutorials"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9739\/8540503\/08419241.pdf?arnumber=8419241","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,27]],"date-time":"2022-01-27T16:03:09Z","timestamp":1643299389000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8419241\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"references-count":162,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/comst.2018.2859449","relation":{},"ISSN":["1553-877X","2373-745X"],"issn-type":[{"value":"1553-877X","type":"electronic"},{"value":"2373-745X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]}}}