{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T04:48:41Z","timestamp":1785905321677,"version":"3.56.0"},"reference-count":41,"publisher":"Sociedade Brasileira de Computacao - SB","issue":"1","license":[{"start":{"date-parts":[[2015,1,27]],"date-time":"2015-01-27T00:00:00Z","timestamp":1422316800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Internet Serv Appl"],"published-print":{"date-parts":[[2015,12]]},"abstract":"<jats:title>Abstract<\/jats:title>\n          <jats:p>Network virtualization has become increasingly prominent in recent years. It enables the creation of network infrastructures that are specifically tailored to the needs of distinct network applications and supports the instantiation of favorable environments for the development and evaluation of new architectures and protocols. Despite the wide applicability of network virtualization, the shared use of routing devices and communication channels leads to a series of security-related concerns. It is necessary to provide protection to virtual network infrastructures in order to enable their use in real, large scale environments. In this paper, we present an overview of the state of the art concerning virtual network security. We discuss the main challenges related to this kind of environment, some of the major threats, as well as solutions proposed in the literature that aim to deal with different security aspects.<\/jats:p>","DOI":"10.1186\/s13174-014-0015-z","type":"journal-article","created":{"date-parts":[[2015,1,26]],"date-time":"2015-01-26T19:09:46Z","timestamp":1422299386000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":43,"title":["Virtual network security: threats, countermeasures, and challenges"],"prefix":"10.5753","volume":"6","author":[{"given":"Leonardo Richter","family":"Bays","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rodrigo Ruas","family":"Oliveira","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marinho Pilla","family":"Barcellos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luciano Paschoal","family":"Gaspary","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Edmundo Roberto","family":"Mauro Madeira","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"3742","published-online":{"date-parts":[[2015,1,27]]},"reference":[{"issue":"5","key":"15_CR1","doi-asserted-by":"publisher","first-page":"862","DOI":"10.1016\/j.comnet.2009.10.017","volume":"54","author":"NMMK Chowdhury","year":"2010","unstructured":"Chowdhury NMMK, Boutaba R (2010) A survey of network virtualization. Comput Netw 54(5): 862\u2013876.","journal-title":"Comput Netw"},{"issue":"5\u20136","key":"15_CR2","doi-asserted-by":"publisher","first-page":"339","DOI":"10.1007\/s12243-010-0208-9","volume":"66","author":"N Fernandes","year":"2011","unstructured":"Fernandes N, Moreira MD, Moraes I, Ferraz L, Couto R, Carvalho HT, Campista M, Costa LK, Duarte OB (2011) Virtual networks: isolation, performance, and trends. Ann Telecommun 66(5\u20136): 339\u2013355.","journal-title":"Ann Telecommun"},{"issue":"4","key":"15_CR3","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1109\/MC.2005.136","volume":"38","author":"T Anderson","year":"2005","unstructured":"Anderson T, Peterson L, Shenker S, Turner J (2005) Overcoming the internet impasse through virtualization. Computer 38(4): 34\u201341.","journal-title":"Computer"},{"key":"15_CR4","volume-title":"IEEE\/IFIP Network Operations and Management Symposium (NOMS)","author":"LR Bays","year":"2014","unstructured":"Bays LR, Oliveira RR, Buriol LS, Barcellos MP, Gaspary LP (2014) A heuristic-based algorithm for privacy-oriented virtual network embedding In: IEEE\/IFIP Network Operations and Management Symposium (NOMS).. IEEE, Krakow, Poland."},{"key":"15_CR5","doi-asserted-by":"crossref","unstructured":"Cabuk S, Dalton CI, Ramasamy H, Schunter M (2007) Towards automated provisioning of secure virtualized networks In: ACM Conference on Computer and Communications Security.. New York, USA.","DOI":"10.1145\/1315245.1315275"},{"key":"15_CR6","volume-title":"IEEE International Conference on Pervasive Computing and Communications","author":"S Yu","year":"2008","unstructured":"Yu S, Zhou W (2008) Entropy-based collaborative detection of ddos attacks on community networks In: IEEE International Conference on Pervasive Computing and Communications.. IEEE Computer Society, Washington, DC, USA."},{"key":"15_CR7","volume-title":"IEEE International Conference on Communications","author":"RR Oliveira","year":"2013","unstructured":"Oliveira RR, Marcon DS, Bays LR, Neves MC, Buriol LS, Gaspary LP, Barcellos MP (2013) No more backups: Toward efficient embedding of survivable virtual networks In: IEEE International Conference on Communications.. IEEE, Budapest, Hungary."},{"key":"15_CR8","unstructured":"LAN\/MAN Standards Committee (2006) IEEE Standard for Local and metropolitan area networks \u2013 Virtual Bridged Local Area Networks. IEEE Std 802.1Q-2005 (incorporates IEEE Std 802.1Q1998, IEEE Std 802.1u-2001, IEEE Std 802.1v-2001, and IEEE Std 802.1s-2002). http:\/\/www.ieee802.org\/1\/pages\/802.1Q-2005.html."},{"key":"15_CR9","doi-asserted-by":"crossref","unstructured":"Rosen E, Cisco Systems I, Rekhter Y, Juniper Networks I (2006) RFC 4364: BGP\/MPLS IP Virtual Private Networks (VPNs). http:\/\/www.ietf.org\/rfc\/rfc4364.txt.","DOI":"10.17487\/rfc4364"},{"key":"15_CR10","volume-title":"International Conference on Computational Science and Engineering","author":"A van Cleeff","year":"2009","unstructured":"van Cleeff A, Pieters W, Wieringa RJ (2009) Security implications of virtualization: A literature study In: International Conference on Computational Science and Engineering.. IEEE Computer Society, Washington, DC, USA."},{"key":"15_CR11","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1145\/1355734.1355746","volume":"38","author":"N McKeown","year":"2008","unstructured":"McKeown N, Anderson T, Balakrishnan H, Parulkar G, Peterson L, Rexford J, Shenker S, Turner J (2008) Openflow: enabling innovation in campus networks. SIGCOMM Comput Commun Rev 38: 69\u201374.","journal-title":"SIGCOMM Comput Commun Rev"},{"key":"15_CR12","doi-asserted-by":"publisher","first-page":"909","DOI":"10.1109\/SURV.2012.090512.00043","volume":"15","author":"MF Bari","year":"2013","unstructured":"Bari MF, Boutaba R, Esteves R, Granville LZ, Podlesny M, Rabbani MG, Zhang Q, Zhani MF (2013) Data center network virtualization: A survey. Communications Surveys Tutorials, IEEE 15: 909\u2013928.","journal-title":"Communications Surveys Tutorials, IEEE"},{"key":"15_CR13","volume-title":"Semantics Knowledge and Grid (SKG), 2010 Sixth International Conference On","author":"M Zhou","year":"2010","unstructured":"Zhou M, Zhang R, Xie W, Qian W, Zhou A (2010) Security and privacy in cloud computing: A survey In: Semantics Knowledge and Grid (SKG), 2010 Sixth International Conference On.. IEEE, Beijing, China."},{"key":"15_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/1869-0238-4-5","volume":"4","author":"K Hashizume","year":"2013","unstructured":"Hashizume K, Rosado DG, Fern\u00e1ndez-Medina E, Fernandez EB (2013) An analysis of security issues for cloud computing. J Internet Serv Appl 4: 1\u201313.","journal-title":"J Internet Serv Appl"},{"key":"15_CR15","volume-title":"Future Networks and Services (SDN4FNS), 2013 IEEE SDN For","author":"S Scott-Hayward","year":"2013","unstructured":"Scott-Hayward S, O\u2019Callaghan G, Sezer S (2013) Sdn security: A survey In: Future Networks and Services (SDN4FNS), 2013 IEEE SDN For.. IEEE, Trento, Italy."},{"key":"15_CR16","doi-asserted-by":"crossref","unstructured":"Shirey R (2000) RFC 2828: Internet Security Glossary. http:\/\/www.ietf.org\/rfc\/rfc2828.txt.","DOI":"10.17487\/rfc2828"},{"key":"15_CR17","volume-title":"Cryptography and Network Security: Principles and Practice","author":"W Stallings","year":"2006","unstructured":"Stallings W (2006) Cryptography and Network Security: Principles and Practice. Pearson\/Prentice Hall, Upper Saddle River, New Jersey, USA."},{"key":"15_CR18","volume-title":"International Workshop on Virtualization Technology in Distributed Computing","author":"E Cavalcanti","year":"2006","unstructured":"Cavalcanti E, Assis L, Gaudencio M, Cirne W, Brasileiro F (2006) Sandboxing for a free-to-join grid with support for secure site-wide storage area In: International Workshop on Virtualization Technology in Distributed Computing.. IEEE Computer Society, Washington, USA."},{"key":"15_CR19","volume-title":"International Workshop on Virtualization Technology in Distributed Computing","author":"DI Wolinsky","year":"2006","unstructured":"Wolinsky DI, Agrawal A, Boykin PO, Davis JR, Ganguly A, Paramygin V, Sheng YP, Figueiredo RJ (2006) On the design of virtual machine sandboxes for distributed computing in wide-area overlays of virtual workstations In: International Workshop on Virtualization Technology in Distributed Computing.. IEEE Computer Society, Washington, DC, USA."},{"key":"15_CR20","volume-title":"Computer Sciences and Convergence Information Technology (ICCIT), 2010 5th International Conference On","author":"H Wu","year":"2010","unstructured":"Wu H, Ding Y, Winer C, Yao L (2010) Network security for virtual machine in cloud computing In: Computer Sciences and Convergence Information Technology (ICCIT), 2010 5th International Conference On.. IEEE, Seoul, South Korea."},{"key":"15_CR21","volume-title":"WRI International Conference on Communications and Mobile Computing","author":"Q Cui","year":"2009","unstructured":"Cui Q, Shi W, Wang Y (2009) Design and implementation of a network supporting environment for virtual experimental platforms In: WRI International Conference on Communications and Mobile Computing.. IEEE Computer Society, Washington, DC, USA."},{"key":"15_CR22","doi-asserted-by":"crossref","unstructured":"Huang D, Ata S, Medhi D (2010) Establishing secure virtual trust routing and provisioning domains for future internet In: IEEE Conference on Global Telecommunications, Miami, USA.","DOI":"10.1109\/GLOCOM.2010.5683661"},{"key":"15_CR23","volume-title":"IEEE INFOCOM","author":"Y-A Pignolet","year":"2013","unstructured":"Pignolet Y-A, Schmid S, Tredan G (2013) Adversarial vnet embeddings: A threat for isps? In: IEEE INFOCOM.. IEEE, Turin, Italy."},{"issue":"99","key":"15_CR24","doi-asserted-by":"publisher","first-page":"1839","DOI":"10.1109\/TNET.2013.2238950","volume":"PP","author":"M Fukushima","year":"2013","unstructured":"Fukushima M, Sugiyama K, Hasegawa T, Hasegawa T, Nakao A (2013) Minimum disclosure routing for network virtualization and its experimental evaluation. IEEE\/ACM Trans NetwPP(99): 1839\u20131851.","journal-title":"IEEE\/ACM Trans Netw"},{"key":"15_CR25","volume-title":"IFIP\/IEEE International Symposium on Integrated Network Management","author":"NMMK Chowdhury","year":"2009","unstructured":"Chowdhury NMMK, Zaheer F-E, Boutaba R (2009) imark: an identity management framework for network virtualization environment In: IFIP\/IEEE International Symposium on Integrated Network Management.. IEEE Press, Piscataway, USA."},{"key":"15_CR26","volume-title":"IEEE International Conference on Communications","author":"NC Fernandes","year":"2011","unstructured":"Fernandes NC, Duarte OCMB (2011) Xnetmon: A network monitor for securing virtual networks In: IEEE International Conference on Communications.. IEEE, Kyoto, Japan."},{"key":"15_CR27","volume-title":"IEEE Conference on Global Telecommunications","author":"Y Zhang","year":"2009","unstructured":"Zhang Y, Gao L, Wang C (2009) Multinet: multiple virtual networks for a reliable live streaming service In: IEEE Conference on Global Telecommunications.. IEEE Press, Piscataway, USA."},{"key":"15_CR28","doi-asserted-by":"crossref","unstructured":"Marquezan CC, Granville LZ, Nunzi G, Brunner M (2010) Distributed autonomic resource management for network virtualization In: IEEE\/IFIP Network Operations and Management Symposium, Osaka, Japan.","DOI":"10.1109\/NOMS.2010.5488490"},{"key":"15_CR29","volume-title":"ACM\/IEEE Symposium on Architectures for Networking and Communications Systems","author":"Q Wu","year":"2010","unstructured":"Wu Q, Shanbhag S, Wolf T (2010) Fair multithreading on packet processors for scalable network virtualization In: ACM\/IEEE Symposium on Architectures for Networking and Communications Systems.. ACM, New York, USA."},{"key":"15_CR30","volume-title":"International Conference on Mobile Computing and Networking","author":"R Kokku","year":"2010","unstructured":"Kokku R, Mahindra R, Zhang H, Rangarajan S (2010) Nvs: a virtualization substrate for wimax networks In: International Conference on Mobile Computing and Networking.. ACM, New York, USA."},{"key":"15_CR31","unstructured":"Fernandes NC, Duarte OCMB (2011) Provendo isolamento e qualidade de servi\u00e7o em redes virtuais In: Simp\u00f3sio Brasileiro de Redes de Computadores e Sistemas Distribu\u00eddos, Campo Grande, Brazil. (in Portuguese)."},{"issue":"2","key":"15_CR32","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1145\/1971162.1971173","volume":"41","author":"W-L Yeow","year":"2011","unstructured":"Yeow W-L, Westphal C, Kozat UC (2011) Designing and embedding reliable virtual infrastructures. SIGCOMM Comput Commun Rev 41(2): 57\u201364.","journal-title":"SIGCOMM Comput Commun Rev"},{"key":"15_CR33","volume-title":"IEEE Network Operations and Management Symposium","author":"Q Chen","year":"2014","unstructured":"Chen Q, Wan Y, Qiu X, Li W, Xiao A (2014) A survivable virtual network embedding scheme based on load balancing and reconfiguration In: IEEE Network Operations and Management Symposium.. IEEE, Krakow, Poland."},{"key":"15_CR34","volume-title":"IEEE INFOCOM","author":"Q Zhang","year":"2014","unstructured":"Zhang Q, Zhani MF, Jabri M, Boutaba R (2014) Venice: Reliable virtual data center embedding in clouds In: IEEE INFOCOM.. IEEE, Toronto, Canada."},{"key":"15_CR35","unstructured":"Meixner CC, Dikbiyik F, Tornatore M, Chuah C, Mukherjee B (2013) Disaster-resilient virtual-network mapping and adaptation in optical networks In: International Conference on Optical Network Design and Modeling."},{"key":"15_CR36","volume-title":"IEEE International Conference on Dependable, Autonomic and Secure Computing","author":"S Roschke","year":"2009","unstructured":"Roschke S, Cheng F, Meinel C (2009) Intrusion detection in the cloud In: IEEE International Conference on Dependable, Autonomic and Secure Computing.. IEEE Computer Society, Washington, DC, USA."},{"key":"15_CR37","unstructured":"Common Vulnerabilities and Exposures (2012) CVE-2012-1516. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-1516."},{"key":"15_CR38","unstructured":"Common Vulnerabilities and Exposures (2012) CVE-2012-1517. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-1517."},{"key":"15_CR39","unstructured":"Common Vulnerabilities and Exposures (2012) CVE-2012-2449. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-2449."},{"key":"15_CR40","unstructured":"Common Vulnerabilities and Exposures (2012) CVE-2012-2450. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-2450."},{"issue":"4","key":"15_CR41","first-page":"1","volume":"3","author":"GP Alkmim","year":"2013","unstructured":"Alkmim GP, Batista DM, Fonseca NLS (2013) Mapping virtual networks onto substrate networks. J Internet Serv Appl 3(4): 1\u201315.","journal-title":"J Internet Serv Appl"}],"container-title":["Journal of Internet Services and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13174-014-0015-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13174-014-0015-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13174-014-0015-z","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13174-014-0015-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,2,9]],"date-time":"2022-02-09T22:14:57Z","timestamp":1644444897000},"score":1,"resource":{"primary":{"URL":"https:\/\/jisajournal.springeropen.com\/articles\/10.1186\/s13174-014-0015-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,1,27]]},"references-count":41,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2015,12]]}},"alternative-id":["15"],"URL":"https:\/\/doi.org\/10.1186\/s13174-014-0015-z","relation":{},"ISSN":["1867-4828","1869-0238"],"issn-type":[{"value":"1867-4828","type":"print"},{"value":"1869-0238","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015,1,27]]},"assertion":[{"value":"29 August 2014","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 December 2014","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 January 2015","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"1"}}