{"id":"https://openalex.org/W4366545012","doi":"https://doi.org/10.1145/3577923.3583643","title":"A Tenant-based Two-stage Approach to Auditing the Integrity of Virtual Network Function Chains Hosted on Third-Party Clouds","display_name":"A Tenant-based Two-stage Approach to Auditing the Integrity of Virtual Network Function Chains Hosted on Third-Party Clouds","publication_year":2023,"publication_date":"2023-04-20","ids":{"openalex":"https://openalex.org/W4366545012","doi":"https://doi.org/10.1145/3577923.3583643"},"language":"en","primary_location":{"id":"doi:10.1145/3577923.3583643","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3577923.3583643","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040147297","display_name":"Momen Oqaily","orcid":"https://orcid.org/0000-0001-9746-4431"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Momen Oqaily","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9746-4431","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013360015","display_name":"Suryadipta Majumdar","orcid":"https://orcid.org/0000-0002-6501-4214"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Suryadipta Majumdar","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6501-4214","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7441-7541","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004392770","display_name":"Mohammad Ekramul Kabir","orcid":"https://orcid.org/0000-0003-2044-7187"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad Ekramul Kabir","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2044-7187","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020688490","display_name":"Yosr Jarraya","orcid":"https://orcid.org/0009-0000-6194-5321"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yosr Jarraya","raw_affiliation_strings":["Ericsson Security Research, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0009-0000-6194-5321","affiliations":[{"raw_affiliation_string":"Ericsson Security Research, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000681358","display_name":"A S M Asadujjaman","orcid":"https://orcid.org/0000-0001-6180-3227"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"A S M Asadujjaman","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6180-3227","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077892893","display_name":"Makan Pourzandi","orcid":"https://orcid.org/0000-0001-9775-6231"},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Makan Pourzandi","raw_affiliation_strings":["Ericsson Security research, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0001-9775-6231","affiliations":[{"raw_affiliation_string":"Ericsson Security research, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["CIISE, Concordia University, Montreal, PQ, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3015-3043","affiliations":[{"raw_affiliation_string":"CIISE, Concordia University, Montreal, PQ, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"79","last_page":"90"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7461392879486084},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7145832777023315},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7089211344718933},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5847188830375671},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5768786072731018},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5571298599243164},{"id":"https://openalex.org/keywords/data-integrity","display_name":"Data integrity","score":0.5008537769317627},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.48730170726776123},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.4807738661766052},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4483272135257721},{"id":"https://openalex.org/keywords/virtual-network","display_name":"Virtual network","score":0.43444278836250305},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4140395224094391},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34517598152160645},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.12953844666481018},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11567601561546326}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7461392879486084},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7145832777023315},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7089211344718933},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5847188830375671},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5768786072731018},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5571298599243164},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.5008537769317627},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.48730170726776123},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.4807738661766052},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4483272135257721},{"id":"https://openalex.org/C2776874963","wikidata":"https://www.wikidata.org/wiki/Q4112081","display_name":"Virtual network","level":2,"score":0.43444278836250305},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4140395224094391},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34517598152160645},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.12953844666481018},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11567601561546326},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3577923.3583643","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3577923.3583643","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W1967074206","https://openalex.org/W2110326922","https://openalex.org/W2133626436","https://openalex.org/W2138743329","https://openalex.org/W2144127235","https://openalex.org/W2148762310","https://openalex.org/W2167844084","https://openalex.org/W2170378215","https://openalex.org/W2599171486","https://openalex.org/W2624359066","https://openalex.org/W2731182695","https://openalex.org/W2763317416","https://openalex.org/W2774532408","https://openalex.org/W2774902053","https://openalex.org/W2794291993","https://openalex.org/W2889730581","https://openalex.org/W2965194310","https://openalex.org/W2972553755","https://openalex.org/W2988129415","https://openalex.org/W3004271471","https://openalex.org/W3015248254","https://openalex.org/W3023037469","https://openalex.org/W3096976446","https://openalex.org/W3100098411","https://openalex.org/W3123788679","https://openalex.org/W3211845581","https://openalex.org/W4200262901"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2935909890","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W2091483479"],"abstract_inverted_index":{"There":[0],"is":[1,208,221],"a":[2,26,30,73,118],"growing":[3],"trend":[4],"of":[5,8,24,38,162,179,199],"hosting":[6],"chains":[7,40],"Virtual":[9],"Network":[10],"Functions":[11],"(VNFs)":[12],"on":[13,61,203],"third-party":[14],"clouds":[15],"for":[16,147,215],"more":[17,172],"cost-effective":[18],"deployment.":[19,45],"However,":[20],"the":[21,62,80,83,88,95,104,123,137,148,152,156,167,177,184,189,197,231],"multi-actor":[22],"nature":[23],"such":[25,55,101],"deployment":[27],"may":[28,65,76],"allow":[29],"mismatch":[31],"to":[32,79,91,94,103,130,150,227],"silently":[33],"arise":[34],"between":[35],"tenant-level":[36,127],"specifications":[37],"VNF":[39],"and":[41,110,135,142,174,187,218],"their":[42],"cloud":[43,63],"provider-level":[44,96,145,204],"Most":[46],"existing":[47],"auditing":[48,89],"approaches":[49],"would":[50,106],"face":[51],"difficulties":[52],"in":[53],"identifying":[54,180],"an":[56],"integrity":[57,133,181],"breach.":[58],"First,":[59],"relying":[60],"provider":[64],"not":[66],"be":[67],"sufficient,":[68],"since":[69],"modifications":[70],"made":[71],"by":[72],"stealthy":[74],"attacker":[75],"seem":[77],"legitimate":[78],"provider.":[81],"Second,":[82],"tenant":[84,105,149],"cannot":[85],"directly":[86],"perform":[87],"due":[90],"limited":[92],"access":[93],"data.":[97],"In":[98,113],"addition,":[99],"shipping":[100],"data":[102,146],"incur":[107],"prohibitive":[108],"overhead":[109],"confidentiality":[111],"concerns.":[112],"this":[114],"paper,":[115],"we":[116],"design":[117],"tenant-based,":[119],"two-stage":[120],"solution":[121,164,207],"where":[122],"first":[124,157,168,232],"stage":[125,139,169,191,233],"leverages":[126],"side-channel":[128],"information":[129],"identify":[131],"suspected":[132,153],"breaches,":[134],"then":[136],"second":[138,190],"automatically":[140],"identifies":[141],"anonymizes":[143],"selected":[144],"verify":[151],"breaches":[154,182],"from":[155],"stage.":[158],"The":[159],"key":[160],"advantages":[161],"our":[163],"are:":[165],"(i)":[166],"gives":[170],"tenants":[171,193],"control":[173],"transparency":[175],"(with":[176,196],"capability":[178,198],"without":[183],"provider's":[185],"assistance),":[186],"(ii)":[188],"provides":[192],"higher":[194],"accuracy":[195,229],"rigorous":[200],"verification":[201],"based":[202],"data).":[205],"Our":[206],"integrated":[209],"into":[210],"OpenStack/Tacker":[211],"(a":[212],"popular":[213],"choice":[214],"NFV":[216],"deployment),":[217],"its":[219],"effectiveness":[220],"demonstrated":[222],"via":[223],"experiments":[224],"(e.g.,":[225],"up":[226],"90%":[228],"with":[230],"alone).":[234]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}