SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach
Network slicing presents new opportunities for cost-effective implementations of next-generation communication networks that target diverse service requirements. Deploying vertical use cases on shared resources is the main motivation for network slicing. Recently, network function (NF) sharing has b...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2025-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10848102/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1832576733896769536 |
|---|---|
| author | Omer Zekvan Yilmaz Kubra Kalkan Fatih Alagoz |
| author_facet | Omer Zekvan Yilmaz Kubra Kalkan Fatih Alagoz |
| author_sort | Omer Zekvan Yilmaz |
| collection | DOAJ |
| description | Network slicing presents new opportunities for cost-effective implementations of next-generation communication networks that target diverse service requirements. Deploying vertical use cases on shared resources is the main motivation for network slicing. Recently, network function (NF) sharing has been proposed in the literature in order to further exploit unused resources and lower the costs for network operators. However, such optimizations through NF sharing expose new security threats and need appropriate defense mechanisms. In this paper, we describe new attack vectors that arise due to NF sharing and list some of the possible defense strategies and security precautions. Furthermore, we propose an NF sharing-aware and network slice-oriented distributed denial of service (DDoS) filtering mechanism, SliceScore, that successfully mitigates the threat of resource exhaustion. We prove by simulations that SliceScore outperforms previous filtering mechanisms, which did not focus on differences among network slices. In this regard, we encourage researchers to investigate slice-oriented approaches to improve defense mechanisms in next-generation communication networks. |
| format | Article |
| id | doaj-art-050a0201a06c45f68d03cdd97f2e5e06 |
| institution | Kabale University |
| issn | 2169-3536 |
| language | English |
| publishDate | 2025-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj-art-050a0201a06c45f68d03cdd97f2e5e062025-01-31T00:00:52ZengIEEEIEEE Access2169-35362025-01-0113182941830710.1109/ACCESS.2025.353254310848102SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering ApproachOmer Zekvan Yilmaz0https://orcid.org/0000-0002-1940-0720Kubra Kalkan1https://orcid.org/0000-0003-1918-8587Fatih Alagoz2https://orcid.org/0000-0002-2189-5371ULAK Communications Inc., Boğaziçi University, İstanbul, TürkiyeDepartment of Computer Science, Özyeğin University, İstanbul, TürkiyeDepartment of Computer Engineering, Boğaziçi University, İstanbul, TürkiyeNetwork slicing presents new opportunities for cost-effective implementations of next-generation communication networks that target diverse service requirements. Deploying vertical use cases on shared resources is the main motivation for network slicing. Recently, network function (NF) sharing has been proposed in the literature in order to further exploit unused resources and lower the costs for network operators. However, such optimizations through NF sharing expose new security threats and need appropriate defense mechanisms. In this paper, we describe new attack vectors that arise due to NF sharing and list some of the possible defense strategies and security precautions. Furthermore, we propose an NF sharing-aware and network slice-oriented distributed denial of service (DDoS) filtering mechanism, SliceScore, that successfully mitigates the threat of resource exhaustion. We prove by simulations that SliceScore outperforms previous filtering mechanisms, which did not focus on differences among network slices. In this regard, we encourage researchers to investigate slice-oriented approaches to improve defense mechanisms in next-generation communication networks.https://ieeexplore.ieee.org/document/10848102/Network slicingnetwork function sharingsecurityDDoScommunication networks |
| spellingShingle | Omer Zekvan Yilmaz Kubra Kalkan Fatih Alagoz SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach IEEE Access Network slicing network function sharing security DDoS communication networks |
| title | SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach |
| title_full | SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach |
| title_fullStr | SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach |
| title_full_unstemmed | SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach |
| title_short | SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach |
| title_sort | slicescore a network function sharing aware and slice oriented ddos filtering approach |
| topic | Network slicing network function sharing security DDoS communication networks |
| url | https://ieeexplore.ieee.org/document/10848102/ |
| work_keys_str_mv | AT omerzekvanyilmaz slicescoreanetworkfunctionsharingawareandsliceorientedddosfilteringapproach AT kubrakalkan slicescoreanetworkfunctionsharingawareandsliceorientedddosfilteringapproach AT fatihalagoz slicescoreanetworkfunctionsharingawareandsliceorientedddosfilteringapproach |