{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,12]],"date-time":"2025-07-12T01:17:00Z","timestamp":1752283020690,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":62,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,4,24]],"date-time":"2023-04-24T00:00:00Z","timestamp":1682294400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Industrial Research Chair in SDN\/NFV Security and the Canada Foundation for Innovation","award":["JELF Project 38599"],"award-info":[{"award-number":["JELF Project 38599"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,4,24]]},"DOI":"10.1145\/3577923.3583643","type":"proceedings-article","created":{"date-parts":[[2023,4,20]],"date-time":"2023-04-20T10:57:59Z","timestamp":1681988279000},"page":"79-90","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["A Tenant-based Two-stage Approach to Auditing the Integrity of Virtual Network Function Chains Hosted on Third-Party Clouds"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9746-4431","authenticated-orcid":false,"given":"Momen","family":"Oqaily","sequence":"first","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6501-4214","authenticated-orcid":false,"given":"Suryadipta","family":"Majumdar","sequence":"additional","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7441-7541","authenticated-orcid":false,"given":"Lingyu","family":"Wang","sequence":"additional","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2044-7187","authenticated-orcid":false,"given":"Mohammad","family":"Ekramul Kabir","sequence":"additional","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6194-5321","authenticated-orcid":false,"given":"Yosr","family":"Jarraya","sequence":"additional","affiliation":[{"name":"Ericsson Security Research, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6180-3227","authenticated-orcid":false,"given":"A S M","family":"Asadujjaman","sequence":"additional","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9775-6231","authenticated-orcid":false,"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[{"name":"Ericsson Security research, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3015-3043","authenticated-orcid":false,"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"CIISE, Concordia University, Montreal, PQ, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,4,24]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.80"},{"key":"e_1_3_2_1_2_1","volume-title":"Vara Prasad Talari, and Dr Young Jung","author":"Latif Ammar","year":"2022","unstructured":"Ammar Latif, Ash Khamas, Sundeep Goswami, Vara Prasad Talari, and Dr Young Jung. 2022. Telco Meets AWS Cloud: Deploying DISH's 5G Network in AWS Cloud. Available at: https:\/\/aws.amazon.com\/blogs\/industries\/telco-meets-awscloud- deploying-dishs-5g-network-in-aws-cloud\/."},{"volume-title":"Moon cloud: a cloud platform for ICT security governance. In 2018 IEEE (GLOBECOM)","author":"Anisetti Marco","key":"e_1_3_2_1_3_1","unstructured":"Marco Anisetti, Claudio A Ardagna, Filippo Gaudenzi, Ernesto Damiani, Nicla Diomede, and Patrizio Tufarolo. 2018. Moon cloud: a cloud platform for ICT security governance. In 2018 IEEE (GLOBECOM). IEEE."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2004.1326288"},{"volume-title":"Inferring network Topologies in Infrastructure as a Service Cloud","author":"Battr\u00e9 Dominic","key":"e_1_3_2_1_5_1","unstructured":"Dominic Battr\u00e9, Natalia Frejnik, Siddhant Goel, Odej Kao, and Daniel Warneke. 2011. Inferring network Topologies in Infrastructure as a Service Cloud. In CCGRID. IEEE."},{"volume-title":"FlowCloak: Defeating middlebox-bypass attacks in software-defined networking","author":"Bu Kai","key":"e_1_3_2_1_6_1","unstructured":"Kai Bu, Yutian Yang, Zixuan Guo, Yuanyuan Yang, Xing Li, and Shigeng Zhang. 2018. FlowCloak: Defeating middlebox-bypass attacks in software-defined networking. In IEEE INFOCOM. IEEE."},{"key":"e_1_3_2_1_7_1","volume-title":"Xenofon Vasilakos, Reza Nejabati, and Dimitra Simeonidou.","author":"Bunyakitanon Monchai","year":"2020","unstructured":"Monchai Bunyakitanon, Aloizio Pereira da Silva, Xenofon Vasilakos, Reza Nejabati, and Dimitra Simeonidou. 2020. Auto-3P: An Autonomous VNF Performance Prediction & Placement Framework based on machine learning. CN (2020)."},{"key":"e_1_3_2_1_8_1","volume-title":"Network tomography: Identifiability and Fourier domain estimation","author":"Chen Aiyou","year":"2010","unstructured":"Aiyou Chen, Jin Cao, and Tian Bu. 2010. Network tomography: Identifiability and Fourier domain estimation. IEEE TSP (2010)."},{"key":"e_1_3_2_1_9_1","volume-title":"Hendrik Paul Lopuha\u00e4, and Ludolf Erwin Meester","author":"Dekking Frederik Michel","year":"2005","unstructured":"Frederik Michel Dekking, Cornelis Kraaikamp, Hendrik Paul Lopuha\u00e4, and Ludolf Erwin Meester. 2005. A Modern Introduction to Probability and Statistics: Understanding why and how. Springer Science & Business Media."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2006.885460"},{"volume-title":"Network functions virtualisation (NFV) release 3","author":"ETSI.","key":"e_1_3_2_1_11_1","unstructured":"ETSI. 2018. Network functions virtualisation (NFV) release 3; Management and orchestration; Architecture enhancement for security management specification."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Seyed Kaveh Fayazbakhsh Luis Chiang Vyas Sekar Minlan Yu and Jeffrey C Mogul. 2014. Enforcing Network-Wide Policies in the Presence of Dynamic Middlebox Actions using FlowTags. In USENIX NSDI.","DOI":"10.1145\/2491185.2491203"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"Seyed Kaveh Fayazbakhsh Michael K Reiter and Vyas Sekar. 2013. Verifiable network function outsourcing: requirements challenges and roadmap. In MNFV.","DOI":"10.1145\/2535828.2535831"},{"volume-title":"ChainGuard: Controllerindependent verification of service function chaining in cloud computing","author":"Flittner Johannes M","key":"e_1_3_2_1_14_1","unstructured":"Johannes M Flittner, Matthias Scheuermann. 2017. ChainGuard: Controllerindependent verification of service function chaining in cloud computing. In IEEE SDN."},{"key":"e_1_3_2_1_15_1","volume-title":"NetVM: High performance and flexible networking using virtualization on commodity platforms","author":"Hwang Jinho","year":"2015","unstructured":"Jinho Hwang, K K_ Ramakrishnan, and Timothy Wood. 2015. NetVM: High performance and flexible networking using virtualization on commodity platforms. IEEE TNSM (2015)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Fariha Tasmin Jaigirdar Carsten Rudolph and Chris Bain. 2021. Risk and compliance in IoT-health data propagation: A security-aware provenance based approach. In ICDH.","DOI":"10.1109\/ICDH52753.2021.00015"},{"volume-title":"Throwing darts in the dark? detecting bots with limited data using neural data augmentation","author":"Jan Steve TK","key":"e_1_3_2_1_17_1","unstructured":"Steve TK Jan, Qingying Hao, Tianrui Hu, Jiameng Pu, Sonal Oswal, Gang Wang, and Bimal Viswanath. 2020. Throwing darts in the dark? detecting bots with limited data using neural data augmentation. In IEEE S&P."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2021.3127277"},{"key":"e_1_3_2_1_19_1","unstructured":"Jon Dugan et al. 2021. active measurements of the maximum achievable bandwidth on IP networks. Available at: https:\/\/iperf.fr\/iperf-doc.php."},{"key":"e_1_3_2_1_20_1","unstructured":"Younggyun Koh Rob Knauerhase Paul Brett Mic Bowman Zhihua Wen and Calton Pu. 2007. An analysis of performance interference effects in virtual environments. In ISPASS."},{"key":"e_1_3_2_1_21_1","volume-title":"Master's thesis","author":"Thirunavukkarasu Sudershan Lakshmanan","year":"2020","unstructured":"Sudershan Lakshmanan Thirunavukkarasu. Master's thesis 2020. Caught-in- Translation: Detecting Cross-level Inconsistency Attacks in NFV."},{"key":"e_1_3_2_1_22_1","volume-title":"IDSGAN: Generative adversarial networks for attack generation against intrusion detection. arXiv preprint arXiv:1809.02077","author":"Lin Zilong","year":"2018","unstructured":"Zilong Lin, Yong Shi, and Zhi Xue. 2018. IDSGAN: Generative adversarial networks for attack generation against intrusion detection. arXiv preprint arXiv:1809.02077 (2018)."},{"key":"e_1_3_2_1_23_1","unstructured":"Linux. 2021. Traceroute. Available at: t.ly\/tq0k."},{"key":"e_1_3_2_1_24_1","unstructured":"LinuxPerf. 2021. Profiling with performance counters. Available at: t.ly\/miMd."},{"key":"e_1_3_2_1_25_1","volume-title":"18th USENIX Symposium on Networked Systems Design and Implementation (NSDI 21)","author":"Liu Guyue","year":"2021","unstructured":"Guyue Liu, Hugo Sadok, Anne Kohlbrenner, Bryan Parno, Vyas Sekar, and Justine Sherry. 2021. Don't Yank My Chain: Auditable {NF} Service Chaining. In 18th USENIX Symposium on Networked Systems Design and Implementation (NSDI 21)."},{"volume-title":"Virtual network embedding with formal reachability assurance","author":"Marchetto Guido","key":"e_1_3_2_1_26_1","unstructured":"Guido Marchetto, Riccardo Sisto, Jalolliddin Yusupov, and Adlen Ksentini. 2018. Virtual network embedding with formal reachability assurance. In IEEE CNSM."},{"key":"e_1_3_2_1_27_1","first-page":"48","article-title":"Performance analysis of network I\/O workloads in virtualized data centers","volume":"6","author":"Mei Yiduo","year":"2011","unstructured":"Yiduo Mei, Ling Liu, Xing Pu, Sankaran Sivathanu, and Xiaoshe Dong. 2011. Performance analysis of network I\/O workloads in virtualized data centers. IEEE TSC 6, 1 (2011), 48--63.","journal-title":"IEEE TSC"},{"key":"e_1_3_2_1_28_1","volume-title":"Security and privacy attacks during data communication in software defined mobile clouds. Computer Communications","author":"Moorthy Vaishnavi","year":"2020","unstructured":"Vaishnavi Moorthy, Revathi Venkataraman, and T Rama Rao. 2020. Security and privacy attacks during data communication in software defined mobile clouds. Computer Communications (2020)."},{"key":"e_1_3_2_1_29_1","volume-title":"Dilip Kumar Shaw, and Mythili Vutukuru","author":"Naik Priyanka","year":"2016","unstructured":"Priyanka Naik, Dilip Kumar Shaw, and Mythili Vutukuru. 2016. NFVPerf: Online performance monitoring and bottleneck detection for NFV. In NFV-SDN."},{"key":"e_1_3_2_1_30_1","unstructured":"Netfilter Org. 2021. IPTables. Available at: https:\/\/www.netfilter.org\/."},{"key":"e_1_3_2_1_31_1","unstructured":"Numpy. 2021. The fundamental package for scientific computing with Python. https: https:\/\/scikit-learn.org\/stable\/."},{"key":"e_1_3_2_1_32_1","unstructured":"OpenStack. 2021. OpenStack. Available at: https:\/\/www.openstack.org\/."},{"key":"e_1_3_2_1_33_1","unstructured":"OpenStack. 2021. Tacker. Available at: t.ly\/8dh7."},{"key":"e_1_3_2_1_34_1","unstructured":"OPNFV Group. 2021. Available at: https:\/\/www.opnfv.org\/."},{"key":"e_1_3_2_1_35_1","unstructured":"OProfile. 2022. Linux system profiler. Available at: t.ly\/rqN0."},{"key":"e_1_3_2_1_36_1","unstructured":"Alaa Oqaily LT Sudershan Yosr Jarraya Suryadipta Majumdar Mengyuan Zhang Makan Pourzandi Lingyu Wang and Mourad Debbabi. 2020. NFVGuard: Verifying the Security of Multilevel (NFV) Stack. In CloudCom."},{"volume-title":"iCAT: An Interactive Customizable Anonymization Tool. ESORICS","author":"Oqaily Momen","key":"e_1_3_2_1_37_1","unstructured":"Momen Oqaily, Yosr Jarraya, Mengyuan Zhang, Lingyu Wang, Makan Pourzandi, and Mourad Debbabi. 2019. iCAT: An Interactive Customizable Anonymization Tool. ESORICS, Springer, 658--680."},{"key":"e_1_3_2_1_38_1","unstructured":"OSM Group. 2021. Open Source MANO. Available at: https:\/\/osm.etsi.org\/."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Manuel Peuster and Holger Karl. 2016. Understand your chains: Towards performance profile-based network service management. In EWSDN.","DOI":"10.1109\/EWSDN.2016.9"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","unstructured":"Manuel Peuster and Holger Karl. 2017. Profile your chains not functions: Automated network service profiling in devops environments. In NFV-SDN.","DOI":"10.1109\/NFV-SDN.2017.8169826"},{"key":"e_1_3_2_1_41_1","unstructured":"Ben Pfaff Justin Pettit Teemu Koponen Ethan Jackson Andy Zhou Jarno Rajahalme Jesse Gross Alex Wang Joe Stringer Pravin Shelar et al. 2015. The design and implementation of open vswitch. In NSDI. USENIX."},{"key":"e_1_3_2_1_42_1","volume-title":"Christian Esteve Rothenberg, and Robert Szabo","author":"Rosa Raphael Vicente","year":"2015","unstructured":"Raphael Vicente Rosa, Christian Esteve Rothenberg, and Robert Szabo. 2015. VBaaS: VNF benchmark-as-a-service. In EWSDN."},{"key":"e_1_3_2_1_43_1","unstructured":"Scikit-learn. 2021. Machine Learning in Python. https: https:\/\/numpy.org\/."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"Mustafizur R Shahid Gregory Blanc Houda Jmila Zonghua Zhang and Herv\u00e9 Debar. 2020. Generative Deep Learning for Internet of Things Network Traffic Generation. In PRDC.","DOI":"10.1109\/PRDC50213.2020.00018"},{"key":"e_1_3_2_1_45_1","unstructured":"Snort Org. 2021. snort. Available at: https:\/\/www.snort.org\/."},{"key":"e_1_3_2_1_46_1","unstructured":"Soumith Chintala Emily Denton Martin Arjovsky Michael Mathieu. 2021. How to Train a GAN? Tips and tricks to make GANs work. Available at: https:\/\/github.com\/soumith\/ganhacks."},{"key":"e_1_3_2_1_47_1","unstructured":"Tcpdump. 2021. Tcpdump. Available at:http:\/\/www.tcpdump.org\/index.html."},{"volume-title":"Detecting compromised switches and middlebox-bypass attacks in service function chaining","author":"Thang Nguyen Canh","key":"e_1_3_2_1_48_1","unstructured":"Nguyen Canh Thang and Minho Park. 2019. Detecting compromised switches and middlebox-bypass attacks in service function chaining. In ITNAC. IEEE."},{"key":"e_1_3_2_1_49_1","volume-title":"Lingyu Wang, Makan Pourzandi, and Mourad Debbabi.","author":"Thirunavukkarasu Sudershan Lakshmanan","year":"2019","unstructured":"Sudershan Lakshmanan Thirunavukkarasu, Mengyuan Zhang, Alaa Oqaily, Gagandeep Singh Chawla, Lingyu Wang, Makan Pourzandi, and Mourad Debbabi. 2019. Modeling NFV deployment to identify the cross-level inconsistency vulnerabilities. In CloudCom. IEEE."},{"key":"e_1_3_2_1_50_1","volume-title":"Hang Hu, Danfeng Yao, and Gang Wang.","author":"Tian Ke","year":"2018","unstructured":"Ke Tian, Steve TK Jan, Hang Hu, Danfeng Yao, and Gang Wang. 2018. Needle in a haystack: Tracking down elite phishing domains in the wild. In IMC. 429--442."},{"key":"e_1_3_2_1_51_1","volume-title":"Sfc-checker: Checking the correct forwarding behavior of service function chaining. In NFV-SDN.","author":"Tschaen Brendan","year":"2016","unstructured":"Brendan Tschaen, Ying Zhang, Theo Benson, Sujata Banerjee, Jeongkeun Lee, and Joon-Myung Kang. 2016. Sfc-checker: Checking the correct forwarding behavior of service function chaining. In NFV-SDN."},{"key":"e_1_3_2_1_52_1","unstructured":"Ubuntu. 2021. Cloud Images. Available at: https:\/\/cloud-images.ubuntu.com\/."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102419"},{"key":"e_1_3_2_1_54_1","first-page":"1374","article-title":"Profile-based resource allocation for virtualized network functions","volume":"16","author":"Rossem Steven Van","year":"2019","unstructured":"Steven Van Rossem, Wouter Tavernier, Didier Colle, Mario Pickavet, and Piet Demeester. 2019. Profile-based resource allocation for virtualized network functions. IEEE TNSM 16, 4 (2019), 1374--1388.","journal-title":"IEEE TNSM"},{"key":"e_1_3_2_1_55_1","volume-title":"VNF Performance Modelling: From stand-alone to chained topologies. CN 181","author":"Rossem Steven Van","year":"2020","unstructured":"Steven Van Rossem, Wouter Tavernier, Didier Colle, Mario Pickavet, and Piet Demeester. 2020. VNF Performance Modelling: From stand-alone to chained topologies. CN 181 (2020)."},{"key":"e_1_3_2_1_56_1","unstructured":"VMware. 2020. VMware Expands Its VMware Ready for Telco Cloud Program to Accelerate the Deployment of 5G Services. Available at:t.ly\/BIIW."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1117\/12.2559429"},{"key":"e_1_3_2_1_58_1","volume-title":"Hybrid-shield: Accurate and efficient cross-layer countermeasure for run-time detection and mitigation of cache-based side-channel attacks. In CCD.","author":"Sayadi Hossein","year":"2020","unstructured":"HanWang, Hossein Sayadi, Avesta Sasan, Setareh Rafatirad, and Houman Homayoun. 2020. Hybrid-shield: Accurate and efficient cross-layer countermeasure for run-time detection and mitigation of cache-based side-channel attacks. In CCD."},{"key":"e_1_3_2_1_59_1","volume-title":"Detecting vms co-residency in cloud: Using cache-based side channel attacks. Elektronika","author":"Yu Si","year":"2013","unstructured":"Si Yu, Gui Xiaolin, Lin Jiancai, Zhang Xuejun, and Wang Junfei. 2013. Detecting vms co-residency in cloud: Using cache-based side channel attacks. Elektronika (2013)."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"crossref","unstructured":"Xiaoli Zhang Qi Li JianpingWu and Jiahai Yang. 2017. Generic and agile service function chain verification on cloud. In IWQoS.","DOI":"10.1109\/IWQoS.2017.7969150"},{"key":"e_1_3_2_1_61_1","volume-title":"VSFC: Generic and agile verification of service function chains in the cloud","author":"Zhang Xiaoli","year":"2020","unstructured":"Xiaoli Zhang, Qi Li, Zeyu Zhang, Jianping Wu, and Jiahai Yang. 2020. VSFC: Generic and agile verification of service function chains in the cloud. IEEE\/ACM ToN (2020)."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"crossref","unstructured":"Ying Zhang Wenfei Wu Sujata Banerjee Joon-Myung Kang and Mario A Sanchez. 2017. SLA-verifier: Stateful and quantitative verification for service chaining. In INFOCOM.","DOI":"10.1109\/INFOCOM.2017.8057041"}],"event":{"name":"CODASPY '23: Thirteenth ACM Conference on Data and Application Security and Privacy","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Charlotte NC USA","acronym":"CODASPY '23"},"container-title":["Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3577923.3583643","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3577923.3583643","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:08:41Z","timestamp":1750183721000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3577923.3583643"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,24]]},"references-count":62,"alternative-id":["10.1145\/3577923.3583643","10.1145\/3577923"],"URL":"https:\/\/doi.org\/10.1145\/3577923.3583643","relation":{},"subject":[],"published":{"date-parts":[[2023,4,24]]},"assertion":[{"value":"2023-04-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}