SDN-based network security functions for VoIP and VoLTE services
Daeyoung Hyun, Jinyoug Kim, Jaehoon Jeong, Hyoungshick Kim, Jungsoo Park, Taejin Ahn · 2016
This paper proposes a framework for security services for Voice over IP (VoIP) and Voice over LTE (VoLTE) in commercial networks using Software-Defined Networking (SDN) and Network Functions Virtualization (NFV). The VoIP/VoLTE services are exposed to several security threats such as Denial-of-Service (DoS) attack, network sniffing, unauthorized services access, and VoIP spam. The conventional security services for VoIP/VoLTE suffer from the lack of flexible security rule installation and dynamic security rule update. The security service framework for VoIP/VoLTE based on SDN and NSF in this paper suggests an advanced way to deal with the security threats. For different security threats, the framework can flexibly install new rules and dynamically update these rules. Based on a YANG data model for remote networked-device configuration, we implemented basic configuration functions of the security service framework for VoIP/VoLTE. In order to show the feasibility of the proposed framework, we used OpenDaylight for our implementation that can provide VoIP/VoLTE service providers with effective security services.