Abstract: A system, method, and computer program product are provided for verifying virtual network function (VNF) package and/or network service definition integrity. In use, a system identifies a virtual network function package or a network service definition for performing integrity verification. The system computes a unique identifier of the VNF package or the network service definition that allows verification of an integrity of the VNF package or the network service definition. The system stores the unique identifier in a blockchain or a shared database. The system provides the VNF package or the network service definition to an entity such that the entity is capable of verifying the integrity of the VNF package or the network service definition by using the unique identifier of the VNF package or the network service definition from the blockchain or the shared database.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for recovering a structure of network function virtualization orchestration (NFV-O) domains, including: providing an initial structure of NFV-O domains, the initial structure representing assignment of network resources to the domains; providing a current structure of NFV-O domains, the current structure representing a modification of the initial structure due to reassignment of network resources between the domains; identifying at least one network resource reassigned by at least a first domain to at least a second domain; and instructing the at least second domain to surrender the network resource to the at least first domain; wherein the at least one network resource is a part of a communication network using network function virtualization (NFV-based network) orchestration; and wherein the NFV-based network comprises a plurality of network resources assigned to domains managed by respective NF

Abstract: A system, method, and computer program product are provided for automatically certifying a Virtual Network Function (VNF) for use in a Network Function Virtualization based (NFV-based) communication network. In use, an online automated VNF certification system receives information associated with at least one VNF. Further, the online automated VNF certification system performs a first level of certification for the at least one VNF by validating metadata corresponding to the information associated with the at least one VNF. Additionally, the online automated VNF certification system performs a second level of certification for the at least one VNF, including testing deployment based functionality associated with the at least one VNF and validating results of testing the deployment based functionality.

Abstract: A system, method, and computer program product are provided for coordinating a plurality of networks based on network function virtualization (NFV). This includes controlling, by a first network function virtualization based communication network (NFV-based network), a resource provided by a second NFV-based network, comprising: communicating a request for a resource control, the request being transmitted by the first NFV-based network to the second NFV-based network; communicating an authorization for the request for the resource control, the authorization being received by the first NFV-based network from the second NFV-based network; and communicating a control instruction associated with the resource, the control instruction being associated with the authorization, and the control instruction being transmitted by the first NFV-based network to the second NFV-based network.

Abstract: A system, method, and computer program product are provided for tag based testing of virtual services. In use, an original portion of a system within a network in which to implement at least one modification is identified, the original portion of the system including a first virtual service and a second virtual service. Additionally, the original portion of the system is duplicated implemented within the network to form an updated portion of the system. Both the original portion and the updated portion share a single instance of a third service. The updated portion is then tested by processing the same data through the original portion, including the single instance of the third service, and through the updated portion, including the single instance of the third service, and comparing the outputs thereof.

Abstract: A system, method, and computer program product are provided for managing hierarchy and optimization in network function virtualization based networks. In use, a first hardware unit of a plurality of hardware units associated with a network function virtualization (NFV) based communication network is identified, the first hardware unit being identified based on a first load characteristic associated with the first hardware unit. Further, a first virtual network function (VNF) instance associated with the first hardware unit is identified, the first VNF instance being associated with usage of at least one service. Additionally, at least one traffic route associated with the first VNF instance is identified, the at least one traffic route being associated with usage of the at least one service.

Abstract: A system, method, and computer program product are provided for calculating a cost-of-ownership for virtual network functions (VNFs) or Network Service in a Network Function Virtualization based (NFV-based) communication network. In use, a cost-of ownership system receives one or more parameters associated with at least one virtual network function (VNF). The cost-of ownership system identifies a cost associated with each of the parameters. Further, the cost-of ownership system calculates a cost of ownership associated with the at least one virtual network function based on the cost associated with each of the parameters.

Abstract: A system, method, and computer program product are provided for testing virtual services. In use, at least a portion of a system to implement at least one modification is identified, the system including a plurality of services and the modification including one or more of an addition of at least one new virtual service or an update of at least one existing virtual service. Further, the at least one modification is implemented to the at least a portion of the system to generate an updated portion of the system and an original portion of the system, the updated portion of the system including the one or more of the addition of the at least one new virtual service or the update of at least one existing virtual service.

Abstract: A system, method, and computer program product are provided that utilize a decoy in response to a distributed denial of service attack in a communication network. In use, a distributed denial of service (DDoS) attack directed at one or more resources of a communication network is detected. Additionally, at least one first communication channel associated with the communication network that is subject to the DDoS attack is identified. Further, at least one second communication channel to implement functionality of the at least one first communication channel is initiated, while maintaining the at least one first communication channel subject to the DDoS attack to use as a decoy for the DDoS attack. Moreover, the at least one second communication channel is utilized to implement the functionality of the at least one first communication channel while the at least one first communication channel subject to the DDoS attack is used as the decoy for the DDoS attack.

Abstract: A system, method, and computer program product are provided for providing security in a Network Function Virtualization based (NFV-based) communication network. In operation, a security attack is identified. Additionally, a first hardware unit attacked by the security attack is identified. Further, a hardware unit in which to initiate a security defense software program is identified. Moreover, the security defense software program is initiated in the identified hardware unit.

Abstract: A system, method, and computer program product are provided for planning distribution of one or more network resources in a Network Function Virtualization based (NFV-based) communication network. In use, at least one Virtual Network Function (VNF) instance of a VNF is migrated between processing units in a NFV-based communication network, according to a change of load. Further, a lack of at least one network resource associated with at least one network node is reported for planning distribution of one or more network resources in the NFV-based communication network, the missing network resource at least partially limiting migration of one or more VNF instances.

Abstract: A system, method, and computer program product are provided for selecting at least one new physical element and/or virtual element for use in a system including a network function virtualization orchestrator (NFV-O). In use, information corresponding to data traffic associated with a network system including an NFV-O module is identified, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the network system. Additionally, an overall expected usage of the network system is determined based on the information corresponding to the data traffic. Further a cost of implementing at least one of one or more new physical elements or one or more VNFs is determined, based on the overall expected usage.

Abstract: A system, method, and computer program product are provided for instructing a virtual network function (VNF) to operate in accordance with one of a plurality of function definitions. In use, a virtual service including a plurality of VNFs is identified, the virtual service being a virtual service in a Network Function Virtualization (NFV-based) communication network, and at least one of the plurality of VNFs being capable of operating based on any one of a plurality of function definitions. Additionally, information associated with a current operation of the virtual service is received. Furthermore, it is determined which one of the plurality of function definitions the at least one of the plurality of VNFs is to operate, based on at least one of a plurality of policies and the information. Moreover, the at least one of the plurality of VNFs is automatically instructed to operate in accordance with the determined one of the plurality of function definitions.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for communicating information in a communication network using network function virtualization (NFV-based communication network), the method including: sending a communication from a first entity of the NFV-based communication network, the first entity being a sender, and receiving the communication by a second entity of the NFV-based communication network, the second entity being a receiver, where the communication includes: an identification of the sender of the communication, and an identification of the receiver of the communication, an identification of a function associated with the NFV-based communication network, and an authorization associating one or more of the sender and the receiver with the function.

Abstract: A system, method, and computer program product are provided for augmenting a physical network system utilizing a network function virtualization orchestrator (NFV-O). In use, data traffic is monitored utilizing a Network Function Virtualization Orchestrator (NFV-O) module associated with at least a portion of a physical network system, the NFV-O module being operable to manage data flow associated with one or more Virtual Network Functions (VNFs) and one or more physical elements of the physical network system. Additionally, it is determined whether flow of the data traffic should be modified based on at least one of a traffic load or a traffic type utilizing the NFV-O module integrated in the physical network system. Further, at least a portion of the data traffic is directed from at least one of the physical elements to at least one of the VNFs when it is determined that the flow of the data traffic should be modified.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for deploying a plurality of virtual network function (VNF) instances in a communication network using network function virtualization (NFV-based network), where the network includes a plurality of computing-related units and communication links in-between, the method including: determining at least one performance value for at least one of the computing-related units and communication links, determining at least one performance requirement for at least one of the VNF instances, and associating the at least one VNF instance with at least one of the computing-related units and the communication links according to the at least one performance requirement and the at least one performance value.

Abstract: A system, method, and computer program product are provided for testing composite services in a communication network utilizing test data. In use, test data is sent to a composition of virtual services to test at least a portion of the composition of virtual services, the composition of virtual services including at least one first virtual service and at least one second virtual service chained such that the test data is received by the at least one first virtual service and an output of the at least one first virtual service is input to the at least one second virtual service, and at least a portion of the test data being configured such that at least a portion of the output of the at least one first virtual service is the same as the test data input to the at least one first virtual service.

Abstract: A system, method, and computer program product are provided for resource conversion in network function virtualization based networks. In use, a first resource of a first type is identified in a first hardware unit, the first resource at least potentially having insufficient availability and being associated with a Network Function Virtualization based (NFV-based) communication network. Additionally, a second resource of a second type is identified, the second resource being associated with the first hardware unit, the second resource being identified as sufficiently available. Further, a third resource of the first type is identified, the third resource being associated with a second hardware unit, the second hardware unit being associated with the second resource, the third resource being identified as sufficiently available.

Abstract: A system, method, and computer program product are provided for product/service design and creation. In use, at least one new resource is identified in a master catalog. The at least one resource is tested. Additionally, the at least one resource is released for service generation. Further, at least one service is generated utilizing the at least one resource. The at least one service is stored in the master catalog. In addition, the at least one service is released for product generation. Furthermore, at least one product is generated utilizing the at least one service. The at least one product is stored in the master catalog. Moreover, the at least one product is presented for sale.

Abstract: A system, method, and computer program product are provided for performing preventative maintenance in a Network Function Virtualization based (NFV-based) communication network. In use, a first potential fault is identified in a first resource in an NFV-based communication network. Additionally, a first time for maintaining the first resource is identified to prevent an occurrence of the first potential fault. Further, a second resource is identified for replacing the first resource during the first time.