Splitbox: toward efficient private network function virtualization

Hassan Jameel Asghar; Luca Melis; Cyril Soldani; Emiliano De Cristofaro; Mohamed Ali Kaafar; Laurent Mathy

doi:10.1145/2940147.2940150

Splitbox: toward efficient private network function virtualization

Hassan Jameel Asghar, Luca Melis, Cyril Soldani, Emiliano De Cristofaro, Mohamed Ali Kaafar, Laurent Mathy

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

38 Citations (Scopus)

Abstract

This paper presents SplitBox, a scalable system for privately processing network functions that are outsourced as software processes to the cloud. Specifically, providers processing the network functions do not learn the network policies instructing how the functions are to be processed. We first propose an abstract model of a generic network function based on match-action pairs, assuming that this is processed in a distributed manner by multiple honest-but-curious providers. Then, we introduce our SplitBox system for private network function virtualization and present a proof-of-concept implementation on FastClick – an extension of the Click modular router – using a firewall as a use case. Our experimental results show that SplitBox achieves a throughput of over 2 Gbps with 1 kB-sized packets on average, traversing up to 60 firewall rules.

Original language	English
Title of host publication	HotMIddlebox '16
Subtitle of host publication	Proceedings of the 2016 workshop on Hot topics in Middleboxes and Network Function Virtualization
Place of Publication	New York
Publisher	ACM
Pages	7-13
Number of pages	7
ISBN (Electronic)	9781450344241
DOIs	https://doi.org/10.1145/2940147.2940150
Publication status	Published - 2016
Externally published	Yes
Event	Workshop on Hot topics in Middleboxes and Network Function Virtualization, SIGCOMM 2016 - Florianopolis, Brazil Duration: 22 Aug 2016 → 26 Aug 2016

Conference

Conference	Workshop on Hot topics in Middleboxes and Network Function Virtualization, SIGCOMM 2016
Abbreviated title	SIGCOMM '16
Country/Territory	Brazil
City	Florianopolis
Period	22/08/16 → 26/08/16

Keywords

Middlebox Privacy
Secret Sharing
Network Function Virtualization
Firewalls

Access to Document

10.1145/2940147.2940150

Cite this

@inproceedings{294ee4a9ac164ebfab3d3a4ce34d0c24,

title = "Splitbox: toward efficient private network function virtualization",

abstract = "This paper presents SplitBox, a scalable system for privately processing network functions that are outsourced as software processes to the cloud. Specifically, providers processing the network functions do not learn the network policies instructing how the functions are to be processed. We first propose an abstract model of a generic network function based on match-action pairs, assuming that this is processed in a distributed manner by multiple honest-but-curious providers. Then, we introduce our SplitBox system for private network function virtualization and present a proof-of-concept implementation on FastClick – an extension of the Click modular router – using a firewall as a use case. Our experimental results show that SplitBox achieves a throughput of over 2 Gbps with 1 kB-sized packets on average, traversing up to 60 firewall rules.",

keywords = "Middlebox Privacy, Secret Sharing, Network Function Virtualization, Firewalls",

author = "Asghar, {Hassan Jameel} and Luca Melis and Cyril Soldani and {De Cristofaro}, Emiliano and Kaafar, {Mohamed Ali} and Laurent Mathy",

year = "2016",

doi = "10.1145/2940147.2940150",

language = "English",

pages = "7--13",

booktitle = "HotMIddlebox '16",

publisher = "ACM",

note = "Workshop on Hot topics in Middleboxes and Network Function Virtualization, SIGCOMM 2016, SIGCOMM '16 ; Conference date: 22-08-2016 Through 26-08-2016",

}

Asghar, HJ, Melis, L, Soldani, C, De Cristofaro, E, Kaafar, MA & Mathy, L 2016, Splitbox: toward efficient private network function virtualization. in HotMIddlebox '16: Proceedings of the 2016 workshop on Hot topics in Middleboxes and Network Function Virtualization. ACM, New York, pp. 7-13, Workshop on Hot topics in Middleboxes and Network Function Virtualization, SIGCOMM 2016, Florianopolis, Brazil, 22/08/16. https://doi.org/10.1145/2940147.2940150

Splitbox: toward efficient private network function virtualization. / Asghar, Hassan Jameel; Melis, Luca; Soldani, Cyril et al.
HotMIddlebox '16: Proceedings of the 2016 workshop on Hot topics in Middleboxes and Network Function Virtualization. New York: ACM, 2016. p. 7-13.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - Splitbox

T2 - Workshop on Hot topics in Middleboxes and Network Function Virtualization, SIGCOMM 2016

AU - Asghar, Hassan Jameel

AU - Melis, Luca

AU - Soldani, Cyril

AU - De Cristofaro, Emiliano

AU - Kaafar, Mohamed Ali

AU - Mathy, Laurent

PY - 2016

Y1 - 2016

N2 - This paper presents SplitBox, a scalable system for privately processing network functions that are outsourced as software processes to the cloud. Specifically, providers processing the network functions do not learn the network policies instructing how the functions are to be processed. We first propose an abstract model of a generic network function based on match-action pairs, assuming that this is processed in a distributed manner by multiple honest-but-curious providers. Then, we introduce our SplitBox system for private network function virtualization and present a proof-of-concept implementation on FastClick – an extension of the Click modular router – using a firewall as a use case. Our experimental results show that SplitBox achieves a throughput of over 2 Gbps with 1 kB-sized packets on average, traversing up to 60 firewall rules.

AB - This paper presents SplitBox, a scalable system for privately processing network functions that are outsourced as software processes to the cloud. Specifically, providers processing the network functions do not learn the network policies instructing how the functions are to be processed. We first propose an abstract model of a generic network function based on match-action pairs, assuming that this is processed in a distributed manner by multiple honest-but-curious providers. Then, we introduce our SplitBox system for private network function virtualization and present a proof-of-concept implementation on FastClick – an extension of the Click modular router – using a firewall as a use case. Our experimental results show that SplitBox achieves a throughput of over 2 Gbps with 1 kB-sized packets on average, traversing up to 60 firewall rules.

KW - Middlebox Privacy

KW - Secret Sharing

KW - Network Function Virtualization

KW - Firewalls

UR - http://www.scopus.com/inward/record.url?scp=85055032426&partnerID=8YFLogxK

U2 - 10.1145/2940147.2940150

DO - 10.1145/2940147.2940150

M3 - Conference proceeding contribution

SP - 7

EP - 13

BT - HotMIddlebox '16

PB - ACM

CY - New York

Y2 - 22 August 2016 through 26 August 2016

ER -

Splitbox: toward efficient private network function virtualization

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this