ONS2016

NFV promises significant simplification and increased efficiencies, and vCPE is one of the most prominent use cases. Virtualizing customer premises equipment means detaching functions from hardware and eventually from their present location. This impacts the risk profile and introduces additional threats due to the software-driven and open architecture of NFV.
In this presentation, Ulrich Kohn analyzes the vCPE use case with a special focus on the virtualization layer and the virtual infrastructure manager (VIM). He describes attack vectors and explains technical controls provided with OpenStack to counter the emerging risk. A combination of encryption, authentication and traffic isolation provides efficient security controls. The presentation concludes with a customer premises solution which combines performance and security requirements in a highly effective way.