Hardware-accelerated firewall for 5G mobile networks

Ruben Ricart-Sanchez; Pedro Malagon; Jose M. Alcaraz-Calero; Qi Wang

doi:10.1109/ICNP.2018.00066

Hardware-accelerated firewall for 5G mobile networks

Ruben Ricart-Sanchez, Pedro Malagon, Jose M. Alcaraz-Calero, Qi Wang

Research output: Chapter in Book/Published conference output › Conference publication

22 Citations (Scopus)

Abstract

The evolution from the current Fourth-Generation (4G) networks to the emerging Fifth-Generation (5G) technologies implies significant changes in the architecture and poses demanding requirements on network infrastructures. One of the Key Performance Indicators (KPIs) in 5G is to ensure a secure network with zero downtime. In this paper, we focus on the provisioning of protection capabilities for 5G infrastructures. Our objective is to implement a new 5G firewall that allows the detection, differentiation and selective blocking of 5G network traffic in the edge-to-core network segment of a 5G infrastructure, using a hardware-accelerated framework based on Field Programmable Gate Arrays (FPGA), developed using the P4 language. The proposed 5G firewall has been prototyped with the new capabilities proposed empirically validated.

Original language	English
Title of host publication	2018 IEEE 26th International Conference on Network Protocols (ICNP)
Publisher	IEEE
Pages	446-447
Number of pages	2
ISBN (Print)	9781538660447
DOIs	https://doi.org/10.1109/ICNP.2018.00066
Publication status	Published - 8 Nov 2018
Event	The 26th IEEE International Conference on Network Protocols - Cambridge, United Kingdom Duration: 24 Sept 2018 → 27 Sept 2018 http://icnp18.cs.ucr.edu/

Conference

Conference	The 26th IEEE International Conference on Network Protocols
Abbreviated title	IEEE ICNP 2018
Country/Territory	United Kingdom
City	Cambridge
Period	24/09/18 → 27/09/18
Internet address	http://icnp18.cs.ucr.edu/

Keywords

P4-NetFPGA
FPGA
5G mobile networks
Network protection
Firewall

Access to Document

10.1109/ICNP.2018.00066

Cite this

@inproceedings{7b6942690d454ceb9e1213f22a8d8c72,

title = "Hardware-accelerated firewall for 5G mobile networks",

abstract = "The evolution from the current Fourth-Generation (4G) networks to the emerging Fifth-Generation (5G) technologies implies significant changes in the architecture and poses demanding requirements on network infrastructures. One of the Key Performance Indicators (KPIs) in 5G is to ensure a secure network with zero downtime. In this paper, we focus on the provisioning of protection capabilities for 5G infrastructures. Our objective is to implement a new 5G firewall that allows the detection, differentiation and selective blocking of 5G network traffic in the edge-to-core network segment of a 5G infrastructure, using a hardware-accelerated framework based on Field Programmable Gate Arrays (FPGA), developed using the P4 language. The proposed 5G firewall has been prototyped with the new capabilities proposed empirically validated.",

keywords = "P4-NetFPGA, FPGA, 5G mobile networks, Network protection, Firewall",

author = "Ruben Ricart-Sanchez and Pedro Malagon and Alcaraz-Calero, {Jose M.} and Qi Wang",

year = "2018",

month = nov,

day = "8",

doi = "10.1109/ICNP.2018.00066",

language = "English",

isbn = "9781538660447",

pages = "446--447",

booktitle = "2018 IEEE 26th International Conference on Network Protocols (ICNP)",

publisher = "IEEE",

address = "United States",

note = "The 26th IEEE International Conference on Network Protocols, IEEE ICNP 2018 ; Conference date: 24-09-2018 Through 27-09-2018",

url = "http://icnp18.cs.ucr.edu/",

}

TY - GEN

T1 - Hardware-accelerated firewall for 5G mobile networks

AU - Ricart-Sanchez, Ruben

AU - Malagon, Pedro

AU - Alcaraz-Calero, Jose M.

AU - Wang, Qi

PY - 2018/11/8

Y1 - 2018/11/8

N2 - The evolution from the current Fourth-Generation (4G) networks to the emerging Fifth-Generation (5G) technologies implies significant changes in the architecture and poses demanding requirements on network infrastructures. One of the Key Performance Indicators (KPIs) in 5G is to ensure a secure network with zero downtime. In this paper, we focus on the provisioning of protection capabilities for 5G infrastructures. Our objective is to implement a new 5G firewall that allows the detection, differentiation and selective blocking of 5G network traffic in the edge-to-core network segment of a 5G infrastructure, using a hardware-accelerated framework based on Field Programmable Gate Arrays (FPGA), developed using the P4 language. The proposed 5G firewall has been prototyped with the new capabilities proposed empirically validated.

AB - The evolution from the current Fourth-Generation (4G) networks to the emerging Fifth-Generation (5G) technologies implies significant changes in the architecture and poses demanding requirements on network infrastructures. One of the Key Performance Indicators (KPIs) in 5G is to ensure a secure network with zero downtime. In this paper, we focus on the provisioning of protection capabilities for 5G infrastructures. Our objective is to implement a new 5G firewall that allows the detection, differentiation and selective blocking of 5G network traffic in the edge-to-core network segment of a 5G infrastructure, using a hardware-accelerated framework based on Field Programmable Gate Arrays (FPGA), developed using the P4 language. The proposed 5G firewall has been prototyped with the new capabilities proposed empirically validated.

KW - P4-NetFPGA

KW - FPGA

KW - 5G mobile networks

KW - Network protection

KW - Firewall

UR - https://ieeexplore.ieee.org/document/8526854

U2 - 10.1109/ICNP.2018.00066

DO - 10.1109/ICNP.2018.00066

M3 - Conference publication

SN - 9781538660447

SP - 446

EP - 447

BT - 2018 IEEE 26th International Conference on Network Protocols (ICNP)

PB - IEEE

T2 - The 26th IEEE International Conference on Network Protocols

Y2 - 24 September 2018 through 27 September 2018

ER -

Hardware-accelerated firewall for 5G mobile networks

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this