Abstract: A system, method, and computer program product are provided for isolating services of a communication network in response to a distributed denial of service attack. In use, an indication of a detection of a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is received. Additionally, at least one first network service associated with the communication network that is subject to the DDoS attack is identified. Further, the at least one first network service associated with the communication network that is subject to the DDoS attack is isolated.

Abstract: A system, method, and computer program product are provided for reducing common work of components in a Network Function Virtualization based (NFV-based) communication network. In use, at least one virtual network function (VNF) capable of being used in a chain of virtual network functions in a network function virtualization based network is identified. Additionally, the at least one virtual network function is configured to utilize a control component, the control component being capable of being enabled or disabled and being operable to perform one or more functions associated with the at least one virtual network function.

Abstract: A system, method, and computer program product are provided for migrating availability of a resource type in a communication network using network function virtualization, comprising: selecting a resource type; selecting a first section of the network where demand for the resource type is expected to grow; selecting a second section of the network where demand for the resource type is expected to be stable relative to the first section; selecting a third section of the network communicatively coupled to the first and second sections, the third section comprising higher availability of the resource type than the first section; migrating a first virtual network function (VNF) instance from the third section to the first section; and migrating a second virtual network function instance from the second section to the third section.

Abstract: A system, method, and computer program product are provided for providing feedback indicating an impact of user directives on a software system. In use, user input associated with a software system is received. Additionally, an impact of the user input on the software system is determined. Further, feedback is provided indicating the impact of the user input on the software system.

Abstract: A system, method, and computer program product are provided for implementing a virtual obfuscation service in a network. In use, an obfuscation service component is initiated in a network system including one or more virtual services, the obfuscation service component including at least one of: at least one first obfuscation service component associated with a physical portion of the network system or at least one second obfuscation service component associated with a cloud-based virtual portion of the network system. Further, communication to be sent from the physical portion of the network system to the cloud-based virtual portion of the network system is identified. Additionally, the communication is directed from the physical portion of the network system to the first obfuscation service component associated with the physical portion of the network system.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for recovering a structure of network function virtualization orchestration (NFV-O) domains, including: providing an initial structure of NFV-O domains, the initial structure representing assignment of network resources to the domains; providing a current structure of NFV-O domains, the current structure representing a modification of the initial structure due to reassignment of network resources between the domains; identifying at least one network resource reassigned by at least a first domain to at least a second domain; and instructing the at least second domain to surrender the network resource to the at least first domain; wherein the at least one network resource is a part of a communication network using network function virtualization (NFV-based network) orchestration; and wherein the NFV-based network comprises a plurality of network resources assigned to domains managed by respective NF

Abstract: A system, method, and computer program product are provided for coordinating a plurality of networks based on network function virtualization (NFV). This includes controlling, by a first network function virtualization based communication network (NFV-based network), a resource provided by a second NFV-based network, comprising: communicating a request for a resource control, the request being transmitted by the first NFV-based network to the second NFV-based network; communicating an authorization for the request for the resource control, the authorization being received by the first NFV-based network from the second NFV-based network; and communicating a control instruction associated with the resource, the control instruction being associated with the authorization, and the control instruction being transmitted by the first NFV-based network to the second NFV-based network.

Abstract: A system, method, and computer program product are provided for tag based testing of virtual services. In use, an original portion of a system within a network in which to implement at least one modification is identified, the original portion of the system including a first virtual service and a second virtual service. Additionally, the original portion of the system is duplicated implemented within the network to form an updated portion of the system. Both the original portion and the updated portion share a single instance of a third service. The updated portion is then tested by processing the same data through the original portion, including the single instance of the third service, and through the updated portion, including the single instance of the third service, and comparing the outputs thereof.

Abstract: A system, method, and computer program product are provided for testing virtual services. In use, at least a portion of a system to implement at least one modification is identified, the system including a plurality of services and the modification including one or more of an addition of at least one new virtual service or an update of at least one existing virtual service. Further, the at least one modification is implemented to the at least a portion of the system to generate an updated portion of the system and an original portion of the system, the updated portion of the system including the one or more of the addition of the at least one new virtual service or the update of at least one existing virtual service.

Abstract: A system, method, and computer program product are provided that utilize a decoy in response to a distributed denial of service attack in a communication network. In use, a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is detected. Additionally, at least one first communication channel associated with the communication network that is subject to the DDoS attack is identified. Further, at least one second communication channel to implement functionality of the at least one first communication channel is initiated, while maintaining the at least one first communication channel subject to the DDoS attack to use as a decoy for the DDoS attack. Moreover, the at least one second communication channel is utilized to implement the functionality of the at least one first communication channel while the at least one first communication channel subject to the DDoS attack is used as the decoy for the DDoS attack.

Abstract: A system, method, and computer program product are provided for planning distribution of one or more network resources in a Network Function Virtualization based (NFV-based) communication network. In use, at least one Virtual Network Function (VNF) instance of a VNF is migrated between processing units in a NFV-based communication network, according to a change of load. Further, a lack of at least one network resource associated with at least one network node is reported for planning distribution of one or more network resources in the NFV-based communication network, the missing network resource at least partially limiting migration of one or more VNF instances.

Abstract: A system, method, and computer program product are provided for selecting at least one new physical element and/or virtual element for use in a system including a network function virtualization orchestrator (NFV-O). In use, information corresponding to data traffic associated with a network system including an NFV-O module is identified, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the network system. Additionally, an overall expected usage of the network system is determined based on the information corresponding to the data traffic. Further a cost of implementing at least one of one or more new physical elements or one or more VNFs is determined, based on the overall expected usage.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for communicating information in a communication network using network function virtualization (NFV-based communication network), the method including: sending a communication from a first entity of the NFV-based communication network, the first entity being a sender, and receiving the communication by a second entity of the NFV-based communication network, the second entity being a receiver, where the communication includes: an identification of the sender of the communication, and an identification of the receiver of the communication, an identification of a function associated with the NFV-based communication network, and an authorization associating one or more of the sender and the receiver with the function.

Abstract: A system, method, and computer program product are provided for augmenting a physical network system utilizing a network function virtualization orchestrator (NFV-O). In use, data traffic is monitored utilizing a Network Function Virtualization Orchestrator (NFV-O) module associated with at least a portion of a physical network system, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the physical network system. Additionally, it is determined whether flow of the data traffic should be modified based on at least one of a traffic load or a traffic type utilizing the NFV-O module integrated in the physical network system. Further, at least a portion of the data traffic is directed from at least one of the physical elements to at least one of the VNFs when it is determined that the flow of the data traffic should be modified.

Abstract: A system, method, and computer program product are provided for testing composite services in a communication network utilizing test data. In use, test data is sent to a composition of virtual services to test at least a portion of the composition of virtual services, the composition of virtual services including at least one first virtual service and at least one second virtual service chained such that the test data is received by the at least one first virtual service and an output of the at least one first virtual service is input to the at least one second virtual service, and at least a portion of the test data being configured such that at least a portion of the output of the at least one first virtual service is the same as the test data input to the at least one first virtual service.

Abstract: A system, method, and computer program product are provided for routing traffic to a service in a network including at least one virtual network service. In use, data traffic directed to at least one first component in a network system is received. Further, one or more second components capable of handling the data traffic are identified based on information associated with the data traffic, the one or more second components including one or more virtual services or one or more physical services. Additionally, at least one of the one or more second components is selected to receive the data traffic, based on criteria associated with the at least one of the one or more second components and the information associated with the data traffic. Moreover, the data traffic is sent to the at least one of the one or more second components.

Abstract: A system, method, and computer program product are provided for augmenting a physical network system utilizing a network function virtualization orchestrator (NFV-O). In use, data traffic is monitored utilizing a Network Function Virtualization Orchestrator (NFV-O) module associated with at least a portion of a physical network system, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the physical network system. Additionally, it is determined whether flow of the data traffic should be modified based on at least one of a traffic load or a traffic type utilizing the NFV-O module integrated in the physical network system. Further, at least a portion of the data traffic is directed from at least one of the physical elements to at least one of the VNFs when it is determined that the flow of the data traffic should be modified.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for communicating information in a communication network using network function virtualization (NFV-based communication network), the method including: sending a communication from a first entity of the NFV-based communication network, the first entity being a sender, and receiving the communication by a second entity of the NFV-based communication network, the second entity being a receiver, where the communication includes: an identification of the sender of the communication, and an identification of the receiver of the communication, an identification of a function associated with the NFV-based communication network, and an authorization associating one or more of the sender and the receiver with the function.