SliceScore: A Network Function Sharing Aware and Slice-Oriented DDoS Filtering Approach
IEEE Access, cilt.13, ss.18294-18307, 2025 (SCI-Expanded, Scopus)
- Yayın Türü: Makale / Tam Makale
- Cilt numarası: 13
- Basım Tarihi: 2025
- Doi Numarası: 10.1109/access.2025.3532543
- Dergi Adı: IEEE Access
- Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus, Compendex, INSPEC, Directory of Open Access Journals
- Sayfa Sayıları: ss.18294-18307
- Anahtar Kelimeler: Noise measurement, Security, Computer crime, Filtering, Network slicing, Vectors, Costs, 5G mobile communication, Quality of service, Ultra reliable low latency communication, network function sharing, security, DDoS, communication networks
- Boğaziçi Üniversitesi Adresli: Evet
Özet
Network slicing presents new opportunities for cost-effective implementations of next-generation communication networks that target diverse service requirements. Deploying vertical use cases on shared resources is the main motivation for network slicing. Recently, network function (NF) sharing has been proposed in the literature in order to further exploit unused resources and lower the costs for network operators. However, such optimizations through NF sharing expose new security threats and need appropriate defense mechanisms. In this paper, we describe new attack vectors that arise due to NF sharing and list some of the possible defense strategies and security precautions. Furthermore, we propose an NF sharing-aware and network slice-oriented distributed denial of service (DDoS) filtering mechanism, SliceScore, that successfully mitigates the threat of resource exhaustion. We prove by simulations that SliceScore outperforms previous filtering mechanisms, which did not focus on differences among network slices. In this regard, we encourage researchers to investigate slice-oriented approaches to improve defense mechanisms in next-generation communication networks.