{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T21:31:34Z","timestamp":1784842294026,"version":"3.55.0"},"reference-count":65,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2017,2,1]],"date-time":"2017-02-01T00:00:00Z","timestamp":1485907200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"funder":[{"DOI":"10.13039\/501100003725","name":"NRF Korea","doi-asserted-by":"publisher","award":["2014R1A1A1003707"],"award-info":[{"award-number":["2014R1A1A1003707"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008122","name":"ITRC","doi-asserted-by":"publisher","award":["IITP-2015-H8501-15-1008"],"award-info":[{"award-number":["IITP-2015-H8501-15-1008"]}],"id":[{"id":"10.13039\/501100008122","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003621","name":"MSIP\/IITP","doi-asserted-by":"publisher","award":["R0166-15-1041"],"award-info":[{"award-number":["R0166-15-1041"]}],"id":[{"id":"10.13039\/501100003621","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003621","name":"MSIP\/IITP","doi-asserted-by":"publisher","award":["R-20160222-002755"],"award-info":[{"award-number":["R-20160222-002755"]}],"id":[{"id":"10.13039\/501100003621","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Future Generation Computer Systems"],"published-print":{"date-parts":[[2017,2]]},"DOI":"10.1016\/j.future.2016.07.002","type":"journal-article","created":{"date-parts":[[2016,7,30]],"date-time":"2016-07-30T20:27:49Z","timestamp":1469910469000},"page":"315-324","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":60,"special_numbering":"C","title":["Security challenges with network functions virtualization"],"prefix":"10.1016","volume":"67","author":[{"given":"Mahdi","family":"Daghmehchi Firoozjaei","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaehoon (Paul)","family":"Jeong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hoon","family":"Ko","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1605-3866","authenticated-orcid":false,"given":"Hyoungshick","family":"Kim","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.future.2016.07.002_br000005","series-title":"Network Functions Virtualisation; Introductory White Paper. Technical Report","year":"2012"},{"key":"10.1016\/j.future.2016.07.002_br000010","series-title":"Network Functions Virtualisation (NFV); Infrastructure Overview. Technical Report, ETSI GS NFV-INF 001 V1.1.1","year":"2015"},{"key":"10.1016\/j.future.2016.07.002_br000015","series-title":"Software-Defined Networking: The New Norm for Networks. Technical Report","year":"2012"},{"key":"10.1016\/j.future.2016.07.002_br000020","doi-asserted-by":"crossref","unstructured":"M. Aiash, G. Mapp, O. Gemikonakli, Secure live virtual machines migration: Issues and solutions, in: 28th International Conference on Advanced Information Networking and Applications Workshops, 2014, pp. 160\u2013165.","DOI":"10.1109\/WAINA.2014.35"},{"issue":"4","key":"10.1016\/j.future.2016.07.002_br000025","doi-asserted-by":"crossref","first-page":"2181","DOI":"10.1109\/COMST.2014.2326417","article-title":"A survey on software-defined network and openflow: From concept to implementation","volume":"16","author":"Hu","year":"2014","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.future.2016.07.002_br000030","series-title":"Cloud Computing: Challenges, Limitations and R & D Solutions","first-page":"3","author":"Shafieian","year":"2014"},{"key":"10.1016\/j.future.2016.07.002_br000035","doi-asserted-by":"crossref","unstructured":"Y. Luo, E. Murray, T.L. Ficarra, Accelerated virtual switching with programmable NICs for scalable data center networking, in: Proceedings of the Second ACM SIGCOMM Workshop on Virtualized Infrastructure Systems and Architectures, 2010, pp. 65\u201372.","DOI":"10.1145\/1851399.1851411"},{"issue":"2","key":"10.1016\/j.future.2016.07.002_br000040","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1109\/MCOM.2015.7045396","article-title":"Network functions virtualization: Challenges and opportunities for innovations","volume":"53","author":"Han","year":"2015","journal-title":"IEEE Commun. Mag."},{"key":"10.1016\/j.future.2016.07.002_br000045","doi-asserted-by":"crossref","first-page":"126","DOI":"10.1109\/MCOM.2015.7045400","article-title":"An instrumentation and analytics framework for optimal and robust NFV deployment","volume":"53","author":"Veitch","year":"2015","journal-title":"IEEE Commun. Mag."},{"key":"10.1016\/j.future.2016.07.002_br000050","doi-asserted-by":"crossref","first-page":"2542","DOI":"10.1109\/ACCESS.2015.2499271","article-title":"Software-defined network function virtualization: A survey","volume":"3","author":"Li","year":"2015","journal-title":"IEEE Access"},{"issue":"1","key":"10.1016\/j.future.2016.07.002_br000055","doi-asserted-by":"crossref","first-page":"655","DOI":"10.1109\/COMST.2015.2489183","article-title":"Survey on network virtualization hypervisors for software defined networking","volume":"18","author":"Blenk","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"1","key":"10.1016\/j.future.2016.07.002_br000060","doi-asserted-by":"crossref","first-page":"236","DOI":"10.1109\/COMST.2015.2477041","article-title":"Network function virtualization: State-of-the-art and research challenges","volume":"18","author":"Mijumbi","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.future.2016.07.002_br000065","doi-asserted-by":"crossref","unstructured":"D. Cotroneo, L. De Simone, A.K. Iannillo, A. Lanzaro, R. Natella, J. Fan, W. Ping, Network function virtualization: Challenges and directions for reliability assurance, in: IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW, 2014, pp. 37\u201342.","DOI":"10.1109\/ISSREW.2014.48"},{"key":"10.1016\/j.future.2016.07.002_br000070","series-title":"Providing Security in NFV- Challenges and Opportunities, Alcatel-Lucent White Paper. Technical Report","year":"2014"},{"issue":"6","key":"10.1016\/j.future.2016.07.002_br000075","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1109\/MNET.2014.6963800","article-title":"NFV: state of the art, challenges and implementation in next generation mobile networks (vEPC)","volume":"28","author":"Hawilo","year":"2014","journal-title":"IEEE Netw. Mag."},{"key":"10.1016\/j.future.2016.07.002_br000080","series-title":"Network Functions Virtualisation (NFV); NFV Security; Security and Trust Guidance. Technical Report, ETSI GS NFV-SEC 003 V1.1.1","year":"2014"},{"key":"10.1016\/j.future.2016.07.002_br000085","series-title":"Network Functions Virtualisation (NFV); Infrastructure; Hypervisor Domain. Technical Report, ETSI GS NFV-INF 004 V1.1.1","year":"2015"},{"key":"10.1016\/j.future.2016.07.002_br000090","series-title":"Intel and Brocade Network Functions Virtualization Solution. Technical Report","year":"2014"},{"issue":"2","key":"10.1016\/j.future.2016.07.002_br000095","first-page":"234","article-title":"Security threats and countermeasures in cloud computing","volume":"1","author":"Ashktorab","year":"2012","journal-title":"Int. J. Appl. Innov. Eng. Manag."},{"key":"10.1016\/j.future.2016.07.002_br000100","first-page":"35","article-title":"Shadow generation protocol in linguistic threshold schemes","volume":"58","author":"Ogiela","year":"2009","journal-title":"Commun. Comput. Inf. Sci."},{"key":"10.1016\/j.future.2016.07.002_br000105","series-title":"The Notorious Nine: Cloud Computing Top Threats in 2013. Technical Report","year":"2013"},{"key":"10.1016\/j.future.2016.07.002_br000110","doi-asserted-by":"crossref","unstructured":"S. Natarajan, T. Wolf, Security issues in network virtualization for the future internet, in: International Conference on Computing, Networking and Communications, ICNC, 2012, pp. 537\u2013543.","DOI":"10.1109\/ICCNC.2012.6167481"},{"key":"10.1016\/j.future.2016.07.002_br000115","unstructured":"W. Eatherton, The push of network processing to the top of the pyramid, in: Keynote Presentation at ACM\/IEEE Symposium on Architectures for Networking and Communication Systems, ANCS, 2005."},{"key":"10.1016\/j.future.2016.07.002_br000120","doi-asserted-by":"crossref","unstructured":"L. Rizzo, M. Carbone, G. Catalli, Transparent acceleration of software packet forwarding using netmap, in: Proceedings of IEEE INFOCOM\u20192012, 2012, pp. 2471\u20132479.","DOI":"10.1109\/INFCOM.2012.6195638"},{"key":"10.1016\/j.future.2016.07.002_br000125","doi-asserted-by":"crossref","unstructured":"A. Shieh, S. Kandula, E.G. Sirer, SideCar: Building programmable datacenter networks without programmable switches, in: Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, Hotnets-IX, 2010, pp. 21:1\u201321:6.","DOI":"10.1145\/1868447.1868468"},{"key":"10.1016\/j.future.2016.07.002_br000130","unstructured":"C. Kachris, G. Sirakoulis, D. Soudris, Network function virtualization based on FPGAs: A framework for all-programmable network devices, CoRR, 2014."},{"issue":"4","key":"10.1016\/j.future.2016.07.002_br000135","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1145\/1851275.1851206","article-title":"SwitchBlade: A platform for rapid deployment of network protocols on programmable hardware","volume":"40","author":"Anwer","year":"2010","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"10.1016\/j.future.2016.07.002_br000140","unstructured":"P. Costa, M. Migliavacca, P. Pietzuch, A.L. Wolf, NaaS: Network-as-a-service in the cloud, in: 2nd USENIX Workshop on Hot Topics in Management of Internet, Cloud, and Enterprise Networks and Services, 2012."},{"key":"10.1016\/j.future.2016.07.002_br000145","doi-asserted-by":"crossref","unstructured":"V. Varadarajan, T. Kooburat, B. Farley, T. Ristenpart, M.M. Swift, Resource-freeing attacks: Improve your cloud performance (at your neighbor\u2019s expense), in: Proceedings of the ACM Conference on Computer and Communications Security, CCS\u201912, 2012, pp. 281\u2013292.","DOI":"10.1145\/2382196.2382228"},{"key":"10.1016\/j.future.2016.07.002_br000150","doi-asserted-by":"crossref","unstructured":"J. Idziorek, M. Tannian, D. Jacobson, Detecting fraudulent use of cloud resources, in: Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop, CCSW\u201911, 2011, pp. 61\u201372.","DOI":"10.1145\/2046660.2046676"},{"key":"10.1016\/j.future.2016.07.002_br000155","doi-asserted-by":"crossref","unstructured":"J. Oberheide, K. Veeraraghavan, E. Cooke, J. Flinn, F. Jahanian, Virtualized in-cloud security services for mobile devices, in: Proceedings of the First Workshop on Virtualization in Mobile Computing, MobiVirt\u201908, 2008, pp. 31\u201335.","DOI":"10.1145\/1622103.1629656"},{"key":"10.1016\/j.future.2016.07.002_br000160","series-title":"Proceedings of the First Workshop on Hot Topics in Software Defined Networks","first-page":"79","article-title":"Splendid isolation: A slice abstraction for software-defined networks","author":"Gutz","year":"2012"},{"key":"10.1016\/j.future.2016.07.002_br000165","doi-asserted-by":"crossref","unstructured":"Y. Zhang, A. Juels, M.K. Reiter, T. Ristenpart, Cross-VM side channels and their use to extract private keys, in: 2012 ACM Conference on Computer and Communications Security, CCS\u201912, 2012, pp. 305\u2013316.","DOI":"10.1145\/2382196.2382230"},{"key":"10.1016\/j.future.2016.07.002_br000170","doi-asserted-by":"crossref","unstructured":"T. Ristenpart, E. Tromer, H. Shacham, S. Savage, Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds, in: Proceedings of CCS 2009, 2009, pp. 199\u2013212.","DOI":"10.1145\/1653662.1653687"},{"key":"10.1016\/j.future.2016.07.002_br000175","series-title":"21st USENIX Security Symposium","first-page":"159","article-title":"Whispers in the hyper-space: High-speed covert channel attacks in the cloud","author":"Wu","year":"2012"},{"key":"10.1016\/j.future.2016.07.002_br000180","doi-asserted-by":"crossref","unstructured":"D.A. Osvik, A. Shamir, E. Tromer, Cache attacks and countermeasures: The case of AES, in: Proceedings of the Cryptographers\u2019 Track at the RSA Conference on Topics in Cryptology, CT-RSA\u201906, 2006, pp. 1\u201320.","DOI":"10.1007\/11605805_1"},{"key":"10.1016\/j.future.2016.07.002_br000185","series-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","first-page":"46","article-title":"C5: Cross-cores cache covert channel","author":"Maurice","year":"2015"},{"key":"10.1016\/j.future.2016.07.002_br000190","unstructured":"V. Varadarajan, Y. Zhang, T. Ristenpart, M. Swift, A placement vulnerability study in multi-tenant public clouds, in: 24th USENIX Security Symposium (USENIX Security 15), 2015, pp. 913\u2013928."},{"key":"10.1016\/j.future.2016.07.002_br000195","unstructured":"J. Oberheide, E. Cooke, F. Jahanian, Empirical exploitation of live virtual machine migration, in: BlackHat DC Convention, 2008."},{"key":"10.1016\/j.future.2016.07.002_br000200","series-title":"15th Conference on USENIX Security Symposium","article-title":"vTPM: Virtualizing the trusted platform module","volume":"vol. 15","author":"Berger","year":"2006"},{"issue":"4","key":"10.1016\/j.future.2016.07.002_br000205","doi-asserted-by":"crossref","first-page":"562","DOI":"10.1007\/s10922-012-9253-1","article-title":"Security-preserving live migration of virtual machines in the cloud","volume":"21","author":"Zhang","year":"2013","journal-title":"J. Netw. Syst. Manage."},{"key":"10.1016\/j.future.2016.07.002_br000210","doi-asserted-by":"crossref","unstructured":"S. Biedermann, M. Zittel, S. Katzenbeisser, Improving security of virtual machines during live migrations, in: 2013 Eleventh Annual International Conference on Privacy, Security and Trust, PST, 2013, pp. 352\u2013357.","DOI":"10.1109\/PST.2013.6596088"},{"key":"10.1016\/j.future.2016.07.002_br000215","unstructured":"Intel Trusted Execution Technology (Intel TxT), Hardware-based Technology for Enhancing Server Platform Security, 2012."},{"key":"10.1016\/j.future.2016.07.002_br000220","unstructured":"MSE: Message Stream Sncryption protocol, Azureu Wiki, 2014. http:\/\/wiki.vuze.com\/w\/MessageStreamEncryption."},{"key":"10.1016\/j.future.2016.07.002_br000225","unstructured":"PCI-SIG SR-IOV Primer, An Introduction to SR-IOV Technology, Intel SR-IOV, 2011."},{"key":"10.1016\/j.future.2016.07.002_br000230","unstructured":"I. Smolyar, M. Ben-Yehuda, D. Tsafrir, Securing self-virtualizing ethernet devices, in: 24th USENIX Security Symposium, USENIX Security 15, 2015, pp. 335\u2013350."},{"key":"10.1016\/j.future.2016.07.002_br000235","doi-asserted-by":"crossref","unstructured":"X. Zhang, Ch. Lan, A. Perrig, Secure and scalable fault localization under dynamic traffic patterns, in: Proceedings of the IEEE Symposium on Security and Privacy, SP\u201912, 2012, pp. 317\u2013331.","DOI":"10.1109\/SP.2012.27"},{"issue":"5","key":"10.1016\/j.future.2016.07.002_br000240","doi-asserted-by":"crossref","first-page":"1200","DOI":"10.1109\/TPDS.2013.116","article-title":"Dynamic trust management for delay tolerant networks and its application to secure routing","volume":"25","author":"Chen","year":"2014","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10.1016\/j.future.2016.07.002_br000245","unstructured":"Intel Trust Execution Technology, (Intel TXT) Enabling Guide, 330139-001US, 2015."},{"key":"10.1016\/j.future.2016.07.002_br000250","doi-asserted-by":"crossref","unstructured":"F. Bernal, M. Sanchez, G. L\u00f3pez, A.F. Gomez-Skarmeta, O. Canovas, Trusted network access control in the eduroam federation, in: Third International Conference on Network and System Security, 2009, NSS\u201909, 2009, pp. 170\u2013175.","DOI":"10.1109\/NSS.2009.47"},{"key":"10.1016\/j.future.2016.07.002_br000255","unstructured":"T. Kim, M. Peinado, G. Mainar-Ruiz, STEALTHMEM: System-level protection against cache-based side channel attacks in the cloud, in: 21st USENIX Security Symposium, USENIX Security 12, 2012, pp. 189\u2013204."},{"key":"10.1016\/j.future.2016.07.002_br000260","doi-asserted-by":"crossref","unstructured":"Y. Zhang, A. Juels, A. Oprea, M.K. Reiter, HomeAlone: Co-residency detection in the cloud via side-channel analysis, in: 2011 IEEE Symposium on Security and Privacy, SP\u201911, 2011, pp. 313\u2013328.","DOI":"10.1109\/SP.2011.31"},{"key":"10.1016\/j.future.2016.07.002_br000265","doi-asserted-by":"crossref","unstructured":"C. Gentry, Fully homomorphic encryption using ideal lattices, in: Proceedings of the Forty-first Annual ACM Symposium on Theory of Computing, STOC\u201909, 2009, pp. 169\u2013178.","DOI":"10.1145\/1536414.1536440"},{"key":"10.1016\/j.future.2016.07.002_br000270","series-title":"The 2016 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization","first-page":"39","article-title":"Private processing of outsourced network functions: Feasibility and constructions","author":"Melis","year":"2016"},{"key":"10.1016\/j.future.2016.07.002_br000275","unstructured":"OpenAttestation, Build and Install OpenAttestation (2.0), 2013. https:\/\/github.com\/OpenAttestation\/OpenAttestation\/wiki."},{"key":"10.1016\/j.future.2016.07.002_br000280","unstructured":"Intel Virtualization Technology for Directed I\/O, Architecture Specification, 2014."},{"key":"10.1016\/j.future.2016.07.002_br000285","unstructured":"Trusted Platform Module Library, TPM 2.0, 2014."},{"key":"10.1016\/j.future.2016.07.002_br000290","unstructured":"Intel Software Guard Extensions Programming Reference, Intel-SGX, 2014."},{"key":"10.1016\/j.future.2016.07.002_br000295","series-title":"Trusted Platform Module Evolution. Technical Report 2","author":"Osborn","year":"2013"},{"key":"10.1016\/j.future.2016.07.002_br000300","series-title":"fTPM: A Firmware-based TPM 2.0 Implementation. Technical Report MSR-TR-2015-84","author":"Raj","year":"2015"},{"key":"10.1016\/j.future.2016.07.002_br000305","doi-asserted-by":"crossref","unstructured":"A. Francillon, Q. Nguyen, K.B. Rasmussen, G. Tsudik, A minimalist approach to remote attestation, in: Proceedings of the Conference on Design, Automation & Test in Europe, DATE\u201914, Vol. 466, 2014, pp. 1\u20136.","DOI":"10.7873\/DATE2014.257"},{"key":"10.1016\/j.future.2016.07.002_br000310","series-title":"1st International Conference on Trusted Computing and Trust in Information Technologies: Trusted Computing - Challenges and Applications","first-page":"33","article-title":"A software-based trusted platform module emulator","author":"Strasser","year":"2008"},{"key":"10.1016\/j.future.2016.07.002_br000315","series-title":"Hardware-based Security for Virtual Trusted Platform Modules. Technical Report","author":"Alsouri","year":"2013"},{"key":"10.1016\/j.future.2016.07.002_br000320","series-title":"High Assurance Platform. Technical Report","year":"2011"},{"issue":"C","key":"10.1016\/j.future.2016.07.002_br000325","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.future.2015.03.001","article-title":"Security enhancement of cloud servers with a redundancy-based fault-tolerant cache structure","volume":"52","author":"Dai","year":"2015","journal-title":"Future Gener. Comput. Syst."}],"container-title":["Future Generation Computer Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167739X16302321?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0167739X16302321?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2019,10,31]],"date-time":"2019-10-31T12:50:57Z","timestamp":1572526257000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0167739X16302321"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,2]]},"references-count":65,"alternative-id":["S0167739X16302321"],"URL":"https:\/\/doi.org\/10.1016\/j.future.2016.07.002","relation":{},"ISSN":["0167-739X"],"issn-type":[{"value":"0167-739X","type":"print"}],"subject":[],"published":{"date-parts":[[2017,2]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Security challenges with network functions virtualization","name":"articletitle","label":"Article Title"},{"value":"Future Generation Computer Systems","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.future.2016.07.002","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2016 Elsevier B.V. All rights reserved.","name":"copyright","label":"Copyright"}]}}