{"id":"https://openalex.org/W2080763045","doi":"https://doi.org/10.1145/1899928.1899939","title":"Virtualizing networking and security in the cloud","display_name":"Virtualizing networking and security in the cloud","publication_year":2010,"publication_date":"2010-12-13","ids":{"openalex":"https://openalex.org/W2080763045","doi":"https://doi.org/10.1145/1899928.1899939","mag":"2080763045"},"language":"en","primary_location":{"id":"doi:10.1145/1899928.1899939","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1899928.1899939","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000684802","display_name":"Debashis Basak","orcid":null},"institutions":[{"id":"https://openalex.org/I4391768063","display_name":"VMware (United States)","ror":"https://ror.org/01mwmh458","country_code":null,"type":"company","lineage":["https://openalex.org/I4391768063"]},{"id":"https://openalex.org/I74786994","display_name":"Kitware (United States)","ror":"https://ror.org/02s2acn37","country_code":"US","type":"company","lineage":["https://openalex.org/I74786994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Debashis Basak","raw_affiliation_strings":["VMware Inc., Palo Alto, CA","VMware, Inc. (Palo Alto, CA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VMware Inc., Palo Alto, CA","institution_ids":["https://openalex.org/I74786994"]},{"raw_affiliation_string":"VMware, Inc. (Palo Alto, CA)","institution_ids":["https://openalex.org/I74786994","https://openalex.org/I4391768063"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081683257","display_name":"Rohit Toshniwal","orcid":null},"institutions":[{"id":"https://openalex.org/I4391768063","display_name":"VMware (United States)","ror":"https://ror.org/01mwmh458","country_code":null,"type":"company","lineage":["https://openalex.org/I4391768063"]},{"id":"https://openalex.org/I74786994","display_name":"Kitware (United States)","ror":"https://ror.org/02s2acn37","country_code":"US","type":"company","lineage":["https://openalex.org/I74786994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rohit Toshniwal","raw_affiliation_strings":["VMware Inc., Palo Alto, CA","VMware, Inc. (Palo Alto, CA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VMware Inc., Palo Alto, CA","institution_ids":["https://openalex.org/I74786994"]},{"raw_affiliation_string":"VMware, Inc. (Palo Alto, CA)","institution_ids":["https://openalex.org/I74786994","https://openalex.org/I4391768063"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073525065","display_name":"Serge Maskalik","orcid":null},"institutions":[{"id":"https://openalex.org/I4391768063","display_name":"VMware (United States)","ror":"https://ror.org/01mwmh458","country_code":null,"type":"company","lineage":["https://openalex.org/I4391768063"]},{"id":"https://openalex.org/I74786994","display_name":"Kitware (United States)","ror":"https://ror.org/02s2acn37","country_code":"US","type":"company","lineage":["https://openalex.org/I74786994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Serge Maskalik","raw_affiliation_strings":["VMware Inc., Palo Alto, CA","VMware, Inc. (Palo Alto, CA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VMware Inc., Palo Alto, CA","institution_ids":["https://openalex.org/I74786994"]},{"raw_affiliation_string":"VMware, Inc. (Palo Alto, CA)","institution_ids":["https://openalex.org/I74786994","https://openalex.org/I4391768063"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046005584","display_name":"Allwyn Sequeira","orcid":null},"institutions":[{"id":"https://openalex.org/I4391768063","display_name":"VMware (United States)","ror":"https://ror.org/01mwmh458","country_code":null,"type":"company","lineage":["https://openalex.org/I4391768063"]},{"id":"https://openalex.org/I74786994","display_name":"Kitware (United States)","ror":"https://ror.org/02s2acn37","country_code":"US","type":"company","lineage":["https://openalex.org/I74786994"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Allwyn Sequeira","raw_affiliation_strings":["VMware Inc., Palo Alto, CA","VMware, Inc. (Palo Alto, CA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VMware Inc., Palo Alto, CA","institution_ids":["https://openalex.org/I74786994"]},{"raw_affiliation_string":"VMware, Inc. (Palo Alto, CA)","institution_ids":["https://openalex.org/I74786994","https://openalex.org/I4391768063"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.5928,"has_fulltext":false,"cited_by_count":48,"citation_normalized_percentile":{"value":0.9611795,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"44","issue":"4","first_page":"86","last_page":"94"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8495567440986633},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.7139542698860168},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.693946897983551},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6378874778747559},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5091018080711365},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4945656955242157},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.45372629165649414},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.44999468326568604},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4288327097892761}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8495567440986633},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7139542698860168},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.693946897983551},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6378874778747559},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5091018080711365},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4945656955242157},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.45372629165649414},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44999468326568604},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4288327097892761}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1899928.1899939","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1899928.1899939","pdf_url":null,"source":{"id":"https://openalex.org/S50071195","display_name":"ACM SIGOPS Operating Systems Review","issn_l":"0163-5980","issn":["0163-5980","1943-586X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGOPS Operating Systems Review","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W1638186213","https://openalex.org/W1867219652","https://openalex.org/W2259537045","https://openalex.org/W2278898976","https://openalex.org/W4206520788","https://openalex.org/W4300930169"],"related_works":["https://openalex.org/W2148749405","https://openalex.org/W2104105430","https://openalex.org/W1515917392","https://openalex.org/W1973516247","https://openalex.org/W2179519055","https://openalex.org/W2050621158","https://openalex.org/W2743348030","https://openalex.org/W2747005099","https://openalex.org/W2145292010","https://openalex.org/W2086039693"],"abstract_inverted_index":{"Virtualization":[0],"of":[1,135,140,173,262,278,304,320,340,347,353,369,376,392,399,453,461,502,516,519,524],"computer":[2],"workloads":[3,147,267],"onto":[4],"powerful":[5],"x86":[6,263],"multicore":[7],"platforms":[8],"is":[9,388,487],"leading":[10,100],"to":[11,40,64,67,75,101,127,163,175,191,270,311,390,423,455],"a":[12,32,185,400,410,485,514,531],"massive":[13],"transformation":[14],"in":[15,34,61,151,188,222,275,360,372,414,420,439,447,538],"the":[16,35,49,96,128,131,141,152,189,216,225,301,361,377,396,415,431,440,448,477],"way":[17,36],"services":[18],"are":[19,30,38,58,113,297],"produced":[20],"by":[21,315],"next":[22],"generation":[23],"data":[24,97,251,540],"centers.":[25],"Simultaneously,":[26],"cloud":[27,416,544],"computing":[28],"principles":[29,119],"compelling":[31],"rethink":[33],"enterprises":[37],"beginning":[39],"consume":[41],"such":[42,496],"services.":[43],"In":[44],"this":[45,220,408],"paper,":[46],"we":[47,404,429],"present":[48,430],"need":[50],"for":[51,104,159,212,381,468],"network":[52,142,161,213],"and":[53,74,88,130,148,169,207,250,276,313,326,330,343,384,459,522,542],"security":[54,79,107,196,210,240,378,433,482,525],"(netsec)":[55],"functions,":[56],"which":[57,112,200],"currently":[59],"realized":[60],"hardware":[62],"appliances,":[63],"significantly":[65,91],"evolve":[66],"keep":[68,121],"pace":[69,122],"with":[70,123,165,255,265,268,334,395,407,425,535],"these":[71,305,367],"new":[72,186,295,351],"trends,":[73],"provide":[76],"\"disruptively":[77],"simplified\"":[78],"that":[80,356,406,435,443],"was":[81,357],"not":[82,358,445],"earlier":[83],"possible":[84,359,446],"With":[85],"server":[86],"consolidation":[87],"desktop":[89],"virtualization,":[90],"more":[92],"traffic":[93,273,457],"remains":[94],"within":[95],"center":[98],"racks,":[99],"blind":[102],"spots":[103],"\"in":[105],"network\"":[106],"appliances.":[108],"Current":[109],"netsec":[110,193],"devices":[111,162,241],"architected":[114],"based":[115,238,480],"on":[116,205,260,481],"\"scale":[117],"up\"":[118],"cannot":[120],"increased":[124],"bandwidth":[125],"driven":[126],"servers,":[129],"ever":[132],"increasing":[133,149],"volume":[134],"threats":[136],"at":[137,476,506],"all":[138],"layers":[139],"stack.":[143],"Also,":[144],"highly":[145],"mobile":[146],"intelligence":[150],"virtual/hypervisor":[153],"layer,":[154],"makes":[155],"it":[156,387,490],"increasingly":[157],"hard":[158],"static":[160],"interlock":[164],"dynamic":[166],"policy":[167],"changes":[168],"onthe-":[170],"fly":[171],"re-purposing":[172],"resources":[174],"serve":[176],"different":[177],"workloads,":[178],"applications,":[179],"or":[180,291],"users":[181],"This":[182],"paper":[183,365],"highlights":[184],"trend":[187,221],"industry":[190],"virtualize":[192],"functions":[194,211],"inside":[195],"virtual":[197,257,279,411,441],"appliances":[198],"(SVAs),":[199],"can":[201,288,417,436,465,491],"then":[202],"be":[203,418,437,492],"placed":[204],"hosts,":[206,517],"offer":[208],"distributed":[209,256,283,344,509],"flows":[214,505],"across":[215,513],"cluster.":[217],"We":[218],"analyze":[219],"detail":[223],"using":[224],"VMware":[226],"vShield":[227],"product":[228],"line":[229],"as":[230,294,497],"an":[231],"example.":[232],"The":[233,364,451],"approach":[234,409],"replaces":[235],"single":[236],"choke-point":[237],"physical":[239,362,393,426,449],"like":[242,336],"firewalls,":[243],"IP":[244,471],"address":[245],"Management":[246],"(IPAM),":[247],"flow":[248,498],"monitoring,":[249],"leakage":[252],"prevention":[253],"(DLP)":[254],"counterparts":[258,394],"running":[259],"slices":[261],"co-located":[264],"compute":[266],"ability":[269,310,452],"tap":[271],"into":[272,458,504],"going":[274],"out":[277,460,511],"machines":[280],"(VMs)":[281],"vShield's":[282],"scale-out":[284,401],"architecture":[285,512],"means":[286],"performance":[287],"scale":[289,510],"up":[290],"down":[292],"linearly":[293],"SVAs":[296,306,454,503],"added,":[298],"while":[299],"simplifying":[300],"lifecycle":[302],"management":[303,346,355,371],"including":[307],"installs,":[308],"upgrades,":[309],"debug,":[312],"reliability":[314],"leveraging":[316],"underlying":[317],"virtualization":[318],"primitives":[319],"VM":[321,327,486,507],"cloning,":[322],"deploy":[323],"from":[324],"template,":[325],"high":[328],"availability":[329],"fault":[331],"tolerance.":[332],"Interactions":[333],"features":[335],"live":[337],"migration":[338],"(vmotion)":[339],"guest":[341],"VMs":[342,462],"power":[345],"host":[348],"servers":[349],"introduce":[350],"aspects":[352,368],"appliance":[354],"world.":[363,450],"analyzes":[366],"SVA":[370],"depth.":[373],"Our":[374],"measurements":[375],"inspection":[379],"throughput":[380],"given":[382],"vCPUs":[383],"memory":[385],"indicate":[386],"comparable":[389],"those":[391],"additional":[397,432],"flexibility":[398],"deployment.":[402],"Further,":[403],"demonstrate":[405],"datacenter":[412],"(VDC)":[413],"deployed":[419],"minutes":[421],"compared":[422],"days/weeks":[424],"datacenters.":[427],"Finally,":[428],"inspections":[434],"performed":[438],"world":[442],"were":[444],"introspect":[456],"implies":[463],"they":[464],"perform":[466],"checks":[467],"MAC":[469],"spoofing,":[470],"spoofing":[472],"[6],":[473],"ARP":[474],"filtering":[475],"source.":[478],"Furthermore,":[479],"analysis":[483],"if":[484],"deemed":[488],"suspect":[489],"quickly":[493],"quarantined":[494],"Concepts":[495],"introspection,":[499],"automated":[500],"insertion":[501],"ingress/egress,":[508],"cluster":[515],"encapsulation":[518],"secure":[520],"VDCs,":[521],"programmability":[523],"policies":[526],"via":[527],"RESTful":[528],"interfaces,":[529],"represent":[530],"significant":[532],"architectural":[533],"change,":[534],"wide":[536],"applicability":[537],"enterprise":[539],"centers,":[541],"private/public":[543],"environments.":[545]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}