2017/06/22 by Pier Luigi Ventre, Alberto Caponi, Ventre, Pier Luigi +11
Computer Science · Engineering · #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Network Security and Intrusion Detection #Networking and Internet Architecture (cs.NI) #Smart Grid Security and Resilience #Software-Defined Networks and 5G #cs.CR #cs.NI
paper · pdf · doi:10.48550/arxiv.1706.07696
Short paper at IEEE LANMAN 2017. arXiv admin note: text overlap with arXiv:1608.01377
arxiv created 2017/06/22 · openalex publication_date 2017/06/22 · arxiv updated 2017/06/26 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Many reasons make NFV an attractive paradigm for IT security: lowers costs, agile operations and better isolation as well as fast security updates, improved incident responses and better level of automation. On the other side, the network threats tend to be increasingly complex and distributed, implying huge traffic scale to be monitored and increasingly strict mitigation delay requirements. Considering the current trend of the net- working and the requirements to counteract to the evolution of cyber-threats, it is expected that also network monitoring will move towards NFV based solutions. In this paper, we present D- StreaMon an NFV-capable distributed framework for network monitoring realized to face the above described challenges. It relies on the StreaMon platform, a solution for network monitoring originally designed for traditional middleboxes. An evolution path which migrates StreaMon from middleboxes to Virtual Network Functions (VNFs) has been realized.