{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T10:09:40Z","timestamp":1771236580165,"version":"3.50.1"},"reference-count":121,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T00:00:00Z","timestamp":1654041600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"French National Research Agency (ANR) in the frame of the \u201cInvestments for the future\u201d Programme IdEx Bordeaux - SysNum","award":["ANR-10-IDEX-03-02"],"award-info":[{"award-number":["ANR-10-IDEX-03-02"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2022,6]]},"DOI":"10.1109\/tnsm.2022.3144582","type":"journal-article","created":{"date-parts":[[2022,1,19]],"date-time":"2022-01-19T20:30:19Z","timestamp":1642624219000},"page":"1567-1584","source":"Crossref","is-referenced-by-count":37,"title":["Network Services Anomalies in NFV: Survey, Taxonomy, and Verification Methods"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7325-3346","authenticated-orcid":false,"given":"Moubarak","family":"Zoure","sequence":"first","affiliation":[{"name":"University of Bordeaux, Bordeaux INP, CNRS, LaBRI, UMR5800, Talence, France"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9245-0759","authenticated-orcid":false,"given":"Toufik","family":"Ahmed","sequence":"additional","affiliation":[{"name":"University of Bordeaux, Bordeaux INP, CNRS, LaBRI, UMR5800, Talence, France"}]},{"given":"Laurent","family":"Reveillere","sequence":"additional","affiliation":[{"name":"University of Bordeaux, Bordeaux INP, CNRS, LaBRI, UMR5800, Talence, France"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102419"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486230"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2016.7919488"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107575"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2626313"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2079296.2079326"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM38437.2019.9013473"},{"key":"ref36","article-title":"Don’t yank my chain: Auditable NF service chaining","author":"liu","year":"0"},{"key":"ref35","first-page":"543","article-title":"Enforcing network-wide policies in the presence of dynamic middlebox actions using FlowTags","author":"fayazbakhsh","year":"2014","journal-title":"Proc 11th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2017.7969150"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC.2018.8443232"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN.2019.8685916"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626323"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1594977.1592595"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36110-3_6"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.298"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN.2017.7899402"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737435"},{"key":"ref101","first-page":"299","article-title":"Elastic scaling of stateful network functions","author":"woo","year":"2018","journal-title":"Proc 15th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2018.00130"},{"key":"ref100","first-page":"97","article-title":"Stateless network functions: Breaking the tight coupling of state and processing","author":"kablan","year":"2017","journal-title":"Proc 14th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC48522.2020.9200904"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2019.8806655"},{"key":"ref51","first-page":"487","article-title":"Container-IMA: A privacy-preserving integrity measurement architecture for containers","author":"luo","year":"2019","journal-title":"Proc 22nd Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48285-7_30"},{"key":"ref58","year":"2021","journal-title":"Welcome To Trusted Computing Group"},{"key":"ref57","year":"2021","journal-title":"OpenStack Docs Image Signature Verification"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2017.7997299"},{"key":"ref55","author":"zohar","year":"2010","journal-title":"An overview of the Linux integrity subsystem"},{"key":"ref54","first-page":"223","article-title":"Design and implementation of a TCG-based integrity measurement architecture","volume":"13","author":"sailer","year":"2004","journal-title":"Proc Usenix Security Symp"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.02.026"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66504-3_12"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.23919\/ONDM48393.2020.9133024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342457"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2377677.2377680"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-016-0046-8"},{"key":"ref5","year":"2021","journal-title":"What Is Network as a Service (NaaS)?"},{"key":"ref8","year":"2020","journal-title":"Top Threats to Cloud Computing Egregious Eleven Deep Dive"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN.2017.7899394"},{"key":"ref7","year":"2016","journal-title":"Micro Survey—Appetite for Cloud—ASEAN Trends in Cloud Sentiment"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1600899"},{"key":"ref46","year":"2021","journal-title":"Library 2 0"},{"key":"ref45","year":"2016","journal-title":"The State of Kernel Self Protection Project by Kees Cook Google"},{"key":"ref48","year":"2021","journal-title":"TrustZone for Cortex-A—Arm"},{"key":"ref47","year":"2021","journal-title":"Intel® Software Guard Extensions (Intel® SGX)"},{"key":"ref42","first-page":"1","article-title":"A minimalist approach to remote attestation","author":"francillon","year":"2014","journal-title":"Proc Design Autom Test Eur Conf Exhibition (DATE)"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ITNAC46935.2019.9077969"},{"key":"ref44","author":"gallagher","year":"2014","journal-title":"Inside the NSA's Secret Efforts to Hunt and Hack System Administrators"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/NetSoft48620.2020.9165316"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2043164.2018470"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2005.1498492"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664274"},{"key":"ref70","first-page":"16","article-title":"Dude, where’s that IP? Circumventing measurement-based IP geolocation","author":"gill","year":"2010","journal-title":"Proc 19th USENIX Conf Security"},{"key":"ref76","first-page":"15","article-title":"FIREMAN: A toolkit for firewall modeling and analysis","author":"yuan","year":"2006","journal-title":"Prof IEEE Symp Security and Privacy (SP)"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2012.20"},{"key":"ref74","first-page":"113","article-title":"Header space analysis: Static checking for networks","author":"kazemian","year":"2012","journal-title":"Proc 9th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref75","first-page":"699","article-title":"Verifying reachability in networks with mutable datapaths","author":"panda","year":"2017","journal-title":"Proc 14th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref78","first-page":"87","article-title":"Libra: Divide and conquer to verify forwarding tables in huge networks","author":"zeng","year":"2014","journal-title":"Proc 11th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2009.5339690"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2012.50"},{"key":"ref62","first-page":"59","article-title":"Trusted geolocation in the cloud: Proof of concept implementation","author":"bartock","year":"7904"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38631-2_9"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-017-0095-y"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/378420.378814"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/1971162.1971171"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5062243"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12334-4_18"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177090"},{"key":"ref2","article-title":"Network Function Virtualization (NFV) Market by Component, Virtualized Network Function, Application, End User—Global Forecast to 2027","year":"2021"},{"key":"ref69","first-page":"23","article-title":"Octant: A comprehensive framework for the geolocalization of Internet hosts","volume":"7","author":"wong","year":"2007","journal-title":"Proc NSDI"},{"key":"ref1","author":"chiosi","year":"2012","journal-title":"An Introduction Benefits Enablers Challenges & Call for Action"},{"key":"ref109","author":"muthurajan","year":"2021","journal-title":"Why use containers and cloud-native functions anyway?"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524333"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2014.35"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.55"},{"key":"ref107","first-page":"201","article-title":"SafeBricks: Shielding Network Functions in the Cloud","author":"poddar","year":"2018","journal-title":"Proc 15th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/2716281.2836117"},{"key":"ref106","year":"2021","journal-title":"Using Leak Tests to Evaluate Firewall Effectiveness"},{"key":"ref92","first-page":"275","article-title":"BUZZ: Testing context-dependent policies in stateful networks","author":"fayaz","year":"2016","journal-title":"Proc 13th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128834"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/2413176.2413205"},{"key":"ref104","first-page":"70","article-title":"Leveraging smart contracts for automatic SLA compensation—The case of NFV environments","author":"scheid","year":"2018","journal-title":"Proc AIMS"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_3"},{"key":"ref103","first-page":"53","article-title":"Enabling dynamic SLA compensation using blockchain-based smart contracts","author":"scheid","year":"2019","journal-title":"Proc IFIP\/IEEE Symp Integr Netw Serv Manag (IM)"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2018.2822837"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/2535828.2535831"},{"key":"ref112","year":"2004","journal-title":"SLA Management Handbook"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2015.74"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2019.00034"},{"key":"ref99","first-page":"227","article-title":"Split\/merge: System support for elastic execution in virtual middleboxes","author":"rajagopalan","year":"2013","journal-title":"Proc 10th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/2774993.2774994"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2915195"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2018.8479121"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2016.7502434"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SYSCON.2019.8836849"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2859449"},{"key":"ref14","year":"2021","journal-title":"SDN switches aren't hard to compromise researcher says"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057041"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom49646.2020.00003"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1282380.1282394"},{"key":"ref82","doi-asserted-by":"crossref","first-page":"21","DOI":"10.1007\/978-3-319-14977-6_2","article-title":"Checking cloud contracts in Microsoft azure","author":"bj\u00f8rner","year":"2015","journal-title":"Distributed Computing and Internet Technology"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/ICTC.2015.7354672"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015475"},{"key":"ref81","first-page":"1","article-title":"Automated analysis and debugging of network connectivity policies","author":"jayaraman","year":"2014"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1095921.1095933"},{"key":"ref84","first-page":"469","article-title":"A general approach to network configuration analysis","author":"fogel","year":"2015","journal-title":"Proc 12th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2020.2985908"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2009.2031974"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2017.02.019"},{"key":"ref114","year":"2014","journal-title":"Network Functions Virtualisation (NFV) Service Quality Metrics"},{"key":"ref113","year":"2016","journal-title":"Network Functions Virtualisation (NFV) Accountability Report on Quality Accountability Framework"},{"key":"ref116","year":"2014","journal-title":"Network Functions Virtualisation (NFV) NFV Security Problem Statement"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-25543-5_14"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/NETSOFT.2017.8004204"},{"key":"ref120","author":"brockners","year":"2020","journal-title":"Proof of transit"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23365"},{"key":"ref121","year":"2021","journal-title":"Internetwork Traffic Privacy in Amazon VPC—Amazon Virtual Private Cloud"},{"key":"ref85","first-page":"15","article-title":"VeriFlow: Verifying network-wide invariants in real time","author":"khurshid","year":"2013","journal-title":"Proc 10th USENIX Symp Netw Syst Des Implement (NSDI)"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41540-6_23"},{"key":"ref87","first-page":"1","article-title":"SAT modulo monotonic theories","volume":"29","author":"bayless","year":"2015","journal-title":"Proc AAAI"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39799-8_1"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9792219\/09686060.pdf?arnumber=9686060","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,4]],"date-time":"2022-07-04T19:52:44Z","timestamp":1656964364000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9686060\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6]]},"references-count":121,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2022.3144582","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,6]]}}}