{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:45:58Z","timestamp":1783611958950,"version":"3.55.0"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Industrial Research Chair in SDN\/NFV Security and the Canada Foundation"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1109\/tdsc.2024.3524128","type":"journal-article","created":{"date-parts":[[2025,1,8]],"date-time":"2025-01-08T15:45:35Z","timestamp":1736351135000},"page":"3240-3258","source":"Crossref","is-referenced-by-count":3,"title":["Cross-Level Security Verification for Network Functions Virtualization (NFV)"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-0332-8059","authenticated-orcid":false,"given":"Alaa","family":"Oqaily","sequence":"first","affiliation":[{"name":"Concordia Institute for Information Systems Engineering (CIISE), Concordia university, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2044-7187","authenticated-orcid":false,"given":"Mohammad Ekramul","family":"Kabir","sequence":"additional","affiliation":[{"name":"Concordia Institute for Information Systems Engineering (CIISE), Concordia university, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7441-7541","authenticated-orcid":false,"given":"Lingyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Concordia Institute for Information Systems Engineering (CIISE), Concordia university, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6194-5321","authenticated-orcid":false,"given":"Yosr","family":"Jarraya","sequence":"additional","affiliation":[{"name":"Ericsson Security Research, Ericsson, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6501-4214","authenticated-orcid":false,"given":"Suryadipta","family":"Majumdar","sequence":"additional","affiliation":[{"name":"Concordia Institute for Information Systems Engineering (CIISE), Concordia university, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9775-6231","authenticated-orcid":false,"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[{"name":"Ericsson Security Research, Ericsson, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3015-3043","authenticated-orcid":false,"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"Concordia Institute for Information Systems Engineering (CIISE), Concordia university, Montreal, QC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-2333-4953","authenticated-orcid":false,"given":"Sudershan","family":"L T","sequence":"additional","affiliation":[{"name":"sciCORE, Center for Scientific Computing, University of Basel, Basel, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7457-5198","authenticated-orcid":false,"given":"Mengyuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Vrije Universiteit Amsterdam, Amsterdam, The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"NFV\/Edge adoption and vendor perception survey","year":"2021"},{"key":"ref2","article-title":"Network functions virtualisation (NFV), NFV security, security and trust guidance, v. 1.1. 1","author":"Bursell","year":"2014"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2019.00034"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-023-44701-7"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CSCWD57460.2023.10152717"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3577923.3583643"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66504-3_12"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2017.7969150"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2017.7969147"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2535828.2535831"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2017.8169846"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057041"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2016.7919488"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3002816"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN53031.2021.9665020"},{"key":"ref16","first-page":"155","article-title":"Don\u2019t yank my chain: Auditable NF service chaining","volume-title":"Proc. 18th USENIX Symp. Netw. Syst. Des. Implementation","author":"Liu"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3412841.3441988"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CNS53000.2021.9705020"},{"key":"ref19","article-title":"CVE-2024\u20131085 Detail","year":"2024"},{"key":"ref20","article-title":"CVE-2024-0193 Detail","year":"2024"},{"key":"ref21","article-title":"CVE-2024\u20130646Detail","year":"2024"},{"key":"ref22","first-page":"65","article-title":"Sugar: A CSP to SAT translator based on order encoding","volume-title":"Proc. 2nd Int. CSP Solver Competition","author":"Tamura"},{"key":"ref23","article-title":"OpenStack","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICS51289.2020.00068"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3320811"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-49669-2_1"},{"key":"ref27","article-title":"Verizon launches industry-leading large OpenStack NFV deployment","year":"2016"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom49646.2020.00003"},{"key":"ref30","article-title":"Open network automation platform","year":"2022"},{"key":"ref31","article-title":"OpenStack Tacker","year":"2020"},{"key":"ref32","article-title":"ISO 27002: 2005","year":"2005","journal-title":"Inf. Technol.-Secur. Techn.-Code Pract. Inf. Secur. Controls"},{"key":"ref33","article-title":"Internet engineering task, SFC active WG working group documents","year":"2020"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3041430"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23365"},{"key":"ref37","first-page":"499","article-title":"Checking beliefs in dynamic networks","volume-title":"Proc. 12th USENIX Symp. Netw. Syst. Des. Implementation","author":"Lopes"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3382190"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s41870-019-00294-x"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3267339"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857721"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/JLT.2012.2213796"},{"key":"ref44","article-title":"Heavy reading study on CSPs and OpenStack","year":"2016"},{"key":"ref45","article-title":"Topology and orchestration specification for cloud applications (TOSCA)","year":"2013"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2019.1800023"},{"key":"ref47","article-title":"OSSA-2017-004: OpenStack - Incorrect role assignment with federated keystone","year":"2017"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TASE49443.2020.00023"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/s10817-018-9455-7"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24650"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-30731-7_5"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.3233\/SAT190039"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2975585"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-72200-7_23"},{"key":"ref55","first-page":"157","article-title":"Counting models using connected components","volume-title":"Proc. Conf. Assoc. Advance. Artif. Intell.","author":"Bayardo"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s10601-012-9121-3"},{"key":"ref57","article-title":"Open Source MANO","year":"2022"},{"key":"ref58","article-title":"RFC2784: Generic Routing Encapsulation (GRE)","author":"Farinacci","year":"2000"},{"key":"ref59","article-title":"RFC 8926 geneve: Generic network virtualization encapsulation","author":"Gross","year":"2020"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2779444"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_15"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818034"},{"key":"ref63","first-page":"99","article-title":"Real time network policy checking using header space analysis","volume-title":"Proc. 10th USENIX Symp. Netw. Syst. Des. Implementation","author":"Kazemian"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342452"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.80"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3144582"},{"key":"ref67","first-page":"113","article-title":"Header space analysis: Static checking for networks","volume-title":"Proc. 19th USENIX Symp. Netw. Syst. Des. Implementation","author":"Kazemian"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2774993.2775067"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11077775\/10833829.pdf?arnumber=10833829","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,11]],"date-time":"2025-07-11T22:48:43Z","timestamp":1752274123000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10833829\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":65,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2024.3524128","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}