Bridging the security drawbacks of virtualized network resource provisioning model

Cloud networking receives a lot of attention from the research community, especially due to its ability to bridge the dependability gaps in the existing cloud service provisioning models by enabling provisioning of virtualized network resources and providing network guarantees to the end-user. In cloud networking, network resources shared between multiple tenants are virtualized, and provisioned to customers in an elastic fashion. However, the existing cloud networking systems have many drawbacks pertaining to security, management, and performance. Therefore, it is necessary to develop new security architectures and suitable algorithms to provide effective security to the virtualized network resources available in the cloud. In this paper, we propose a new architecture which focuses on providing a security mechanism for cloud network resource provisioning models. The central feature of this architecture is a hierarchical, multi-domain, and multi-level security goal translation function which promotes security of the virtualized network resources and trust management between the service providers