Amdocs Development Limited

Amdocs Software Systems Limited

Deutschetelekom Ag

Itzik Kitroser

Ofer Hermoni

Eyal Felstaine

Shmuel Ur

Nimrod Sandlerman

Gerhard Kadel

Hans Joachim Einsiedler

Yehuda Ben-Shimol

A system, method, and computer program product are provided for isolating services of a communication network in response to a distributed denial of service attack. In use, an indication of a detection of a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is received. Additionally, at least one first network service associated with the communication network that is subject to the DDoS attack is identified. Further, the at least one first network service associated with the communication network that is subject to the DDoS attack is isolated.

System, method, and computer program for isolating services of a communication network in response to a distributed denial of service (DDoS) attack

A system, method, and computer program product are provided for reducing common work of components in a Network Function Virtualization based (NFV-based) communication network. In use, at least one virtual network function (VNF) capable of being used in a chain of virtual network functions in a network function virtualization based network is identified. Additionally, the at least one virtual network function is configured to utilize a control component, the control component being capable of being enabled or disabled and being operable to perform one or more functions associated with the at least one virtual network function.

System, method, and computer program for reducing common work of components in a network function virtualization (NFV) based communication network

A system, method, and computer program product are provided for migrating availability of a resource type in a communication network using network function virtualization, comprising: selecting a resource type; selecting a first section of the network where demand for the resource type is expected to grow; selecting a second section of the network where demand for the resource type is expected to be stable relative to the first section; selecting a third section of the network communicatively coupled to the first and second sections, the third section comprising higher availability of the resource type than the first section; migrating a first virtual network function (VNF) instance from the third section to the first section; and migrating a second virtual network function instance from the second section to the third section.

System, method, and computer program for defragmenting a network based on network function virtualization (NFV)

A system, method, and computer program product are provided for implementing a virtual obfuscation service in a network. In use, an obfuscation service component is initiated in a network system including one or more virtual services, the obfuscation service component including at least one of: at least one first obfuscation service component associated with a physical portion of the network system or at least one second obfuscation service component associated with a cloud-based virtual portion of the network system. Further, communication to be sent from the physical portion of the network system to the cloud-based virtual portion of the network system is identified. Additionally, the communication is directed from the physical portion of the network system to the first obfuscation service component associated with the physical portion of the network system. Furthermore, the communication is sent from the first obfuscation service component associated with the physical portion of the network system to the second obfuscation service component associated with the cloud-based virtual portion of the network system.

System, method, and computer program for implementing a virtual obfuscation service in a network

A system, method, and computer program product are provided for providing feedback indicating an impact of user directives on a software system. In use, user input associated with a software system is received. Additionally, an impact of the user input on the software system is determined. Further, feedback is provided indicating the impact of the user input on the software system.

System, method, and computer program for providing feedback indicating an impact of user directives on a software system

According to one aspect of the present invention there is provided a system, method, and computer program product for recovering a structure of network function virtualization orchestration (NFV-O) domains, including: providing an initial structure of NFV-O domains, the initial structure representing assignment of network resources to the domains; providing a current structure of NFV-O domains, the current structure representing a modification of the initial structure due to reassignment of network resources between the domains; identifying at least one network resource reassigned by at least a first domain to at least a second domain; and instructing the at least second domain to surrender the network resource to the at least first domain; wherein the at least one network resource is a part of a communication network using network function virtualization (NFV-based network) orchestration; and wherein the NFV-based network comprises a plurality of network resources assigned to domains managed by respective NFV-O modules.

System, method and computer program for deploying an orchestration layer for a network based on network function virtualization (NFV)

A system, method, and computer program product are provided for coordinating a plurality of networks based on network function virtualization (NFV). This includes controlling, by a first network function virtualization based communication network (NFV-based network), a resource provided by a second NFV-based network, comprising: communicating a request for a resource control, the request being transmitted by the first NFV-based network to the second NFV-based network; communicating an authorization for the request for the resource control, the authorization being received by the first NFV-based network from the second NFV-based network; and communicating a control instruction associated with the resource, the control instruction being associated with the authorization, and the control instruction being transmitted by the first NFV-based network to the second NFV-based network.

System, method, and computer program for coordinating a plurality of networks based on network function virtualization (NFV)

A system, method, and computer program product are provided for tag based testing of virtual services. In use, an original portion of a system within a network in which to implement at least one modification is identified, the original portion of the system including a first virtual service and a second virtual service. Additionally, the original portion of the system is duplicated implemented within the network to form an updated portion of the system. Both the original portion and the updated portion share a single instance of a third service. The updated portion is then tested by processing the same data through the original portion, including the single instance of the third service, and through the updated portion, including the single instance of the third service, and comparing the outputs thereof.

System, method, and computer program for tag based testing of virtual services

A system, method, and computer program product are provided for testing virtual services. In use, at least a portion of a system to implement at least one modification is identified, the system including a plurality of services and the modification including one or more of an addition of at least one new virtual service or an update of at least one existing virtual service. Further, the at least one modification is implemented to the at least a portion of the system to generate an updated portion of the system and an original portion of the system, the updated portion of the system including the one or more of the addition of the at least one new virtual service or the update of at least one existing virtual service. Additionally, the updated portion of the system is tested by: receiving input data associated with the updated portion of the system; duplicating the input data to generate a first input data and a second input data; processing the first input data with the updated portion of the system and processing the second input data with the original portion of the system; and comparing at least a portion of an output from the updated portion of the system with at least a portion of an output from the original portion of the system.

System, method, and computer program for testing virtual services

A system, method, and computer program product are provided that utilize a decoy in response to a distributed denial of service attack in a communication network. In use, a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is detected. Additionally, at least one first communication channel associated with the communication network that is subject to the DDoS attack is identified. Further, at least one second communication channel to implement functionality of the at least one first communication channel is initiated, while maintaining the at least one first communication channel subject to the DDoS attack to use as a decoy for the DDoS attack. Moreover, the at least one second communication channel is utilized to implement the functionality of the at least one first communication channel while the at least one first communication channel subject to the DDoS attack is used as the decoy for the DDoS attack.

System, method, and computer program for utilizing a decoy in response to a distributed denial of service (DDOS) attack in a communication network

A system, method, and computer program product are provided for planning distribution of one or more network resources in a Network Function Virtualization based (NFV-based) communication network. In use, at least one Virtual Network Function (VNF) instance of a VNF is migrated between processing units in a NFV-based communication network, according to a change of load. Further, a lack of at least one network resource associated with at least one network node is reported for planning distribution of one or more network resources in the NFV-based communication network, the missing network resource at least partially limiting migration of one or more VNF instances.

System, method, and computer program for planning distribution of network resources in a network function virtualization (NFV) based communication network

A system, method, and computer program product are provided for selecting at least one new physical element and/or virtual element for use in a system including a network function virtualization orchestrator (NFV-O). In use, information corresponding to data traffic associated with a network system including an NFV-O module is identified, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the network system. Additionally, an overall expected usage of the network system is determined based on the information corresponding to the data traffic. Further a cost of implementing at least one of one or more new physical elements or one or more VNFs is determined, based on the overall expected usage. Moreover, at least one of the one or more new physical elements or the one or more VNFs to implement in the network system is selected based at least partially on the determined cost of implementing the one or more new physical elements and the cost of implementing the one or more VNFs.

System, method, and computer program for selecting at least one new physical element and/or virtual element for use in a system including a network function virtualization orchestrator (NFV-O)

According to one aspect of the present invention there is provided a system, method, and computer program product for communicating information in a communication network using network function virtualization (NFV-based communication network), the method including: sending a communication from a first entity of the NFV-based communication network, the first entity being a sender, and receiving the communication by a second entity of the NFV-based communication network, the second entity being a receiver, where the communication includes: an identification of the sender of the communication, and an identification of the receiver of the communication, an identification of a function associated with the NFV-based communication network, and an authorization associating one or more of the sender and the receiver with the function.

System, method, and computer program for inter-module communication in a network based on network function virtualization (NFV)

A system, method, and computer program product are provided for augmenting a physical network system utilizing a network function virtualization orchestrator (NFV-O). In use, data traffic is monitored utilizing a Network Function Virtualization Orchestrator (NFV-O) module associated with at least a portion of a physical network system, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the physical network system. Additionally, it is determined whether flow of the data traffic should be modified based on at least one of a traffic load or a traffic type utilizing the NFV-O module integrated in the physical network system. Further, at least a portion of the data traffic is directed from at least one of the physical elements to at least one of the VNFs when it is determined that the flow of the data traffic should be modified.

System, method, and computer program for augmenting a physical system utilizing a network function virtualization orchestrator (NFV-O)

A system, method, and computer program product are provided for testing composite services in a communication network utilizing test data. In use, test data is sent to a composition of virtual services to test at least a portion of the composition of virtual services, the composition of virtual services including at least one first virtual service and at least one second virtual service chained such that the test data is received by the at least one first virtual service and an output of the at least one first virtual service is input to the at least one second virtual service, and at least a portion of the test data being configured such that at least a portion of the output of the at least one first virtual service is the same as the test data input to the at least one first virtual service. Additionally, a first output is received from the at least one second virtual service, the first output including a result of the output of the at least one first virtual service being input to the at least one second virtual service. Further, the test data is sent as an input to at least one third virtual service, the at least one third virtual service including the same functionality as the at least one second virtual service. In addition, a second output is received from the at least one third virtual service, the second output including a result of the test data being input to the at least one third virtual service including the same functionality as the at least one second virtual service. Moreover, the first output from the at least one second virtual service is compared with the second output from the at least one third virtual service including the same functionality as the at least one second virtual service to test the at least a portion of the composition of virtual services.

Growing community of inventors

Beer Sheva, Israel

Itzik Kitroser