检索结果-南通市图书馆

Security Monitoring and Management for the network Services in the Orchestration of SDN-NFV Environment Using Machine Learning Techniques

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2024年第2期48卷 363-394页

作者： Nasser Alshammari Shumaila Shahzadi Saad Awadh Alanazi Shahid Naseem Muhammad Anwar Madallah Alruwaili Muhammad Rizwan Abid Omar Alruwaili Ahmed Alsayat Fahad Ahmad Department of Computer Science College of Computer and Information SciencesJouf UniversitySakakaAl Jouf72341Saudi Arabia Department of Computer Sciences Kinnaird College forWomenLahorePunjab54700Pakistan Department of Information Sciences Division of Sciences and TechnologyUniversity of EducationLahore54770Pakistan Department of Computer Engineering and networks College of Computer and Information SciencesJouf UniversitySakaka72341Saudi Arabia Computer Science Florida Polytechnic UniversityLakelandFlorida33805USA Delta3T LahorePunjab54700Pakistan Department of Basic Sciences Common First YearJouf UniversitySakaka72341Saudi Arabia

Software Defined network(SDN)and network function virtualization(NFV)technology promote several benefits to network operators,including reduced maintenance costs,increased network operational performance,simplified network lifecycle,and policies *** vulnerabilities try to modify services provided by network function virtualization MANagement and Orchestration(NFV MANO),and malicious attacks in different scenarios disrupt the NFV Orchestrator(NFVO)and Virtualized Infrastructure Manager(VIM)lifecycle management related to network services or individual Virtualized network function(VNF).This paper proposes an anomaly detection mechanism that monitors threats in NFV MANO and manages promptly and adaptively to implement and handle security functions in order to enhance the quality of experience for end *** anomaly detector investigates these identified risks and provides secure network *** enables virtual network security functions and identifies anomalies in Kubernetes(a cloud-based platform).For training and testing purpose of the proposed approach,an intrusion-containing dataset is used that hold multiple malicious activities like a Smurf,Neptune,Teardrop,Pod,Land,IPsweep,etc.,categorized as Probing(Prob),Denial of Service(DoS),User to Root(U2R),and Remote to User(R2L)*** anomaly detector is anticipated with the capabilities of a Machine Learning(ML)technique,making use of supervised learning techniques like Logistic Regression(LR),Support Vector Machine(SVM),Random Forest(RF),Naïve Bayes(NB),and Extreme Gradient Boosting(XGBoost).The proposed framework has been evaluated by deploying the identified ML algorithm on a Jupyter notebook in Kubeflow to simulate Kubernetes for validation *** classifier has shown better outcomes(99.90%accuracy)than other classifiers in detecting anomalies/intrusions in the containerized environment.

关键词： Software defined network network function virtualization network function virtualization management and orchestration virtual infrastructure manager virtual network function Kubernetes Kubectl artificial intelligence machine learning

Virtual network function scheduling via multilayer encoding genetic algorithm with distributed bandwidth allocation

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2018年第9期61卷 93-111页

作者： Quan YUAN Hongbo TANG Wei YOU Xiaolei WANG Yu ZHAO National Digital Switching System Engineering and Technological Research Center

network function virtualization represents a revolutionary approach to network service deployment. This software-oriented approach for virtual network functions(VNFs) deployment enables more flexible and dynamic network services to meet diversified demands. To minimize the execution time of all VNFs in service function chains, VNF scheduling must be addressed. In this paper, we improve upon the flexible job-shop model by introducing the process of bandwidth allocation. First, we propose a multilayer encoding genetic algorithm to solve the VNF scheduling model. In addition, we design a distributed method for bandwidth allocation based on the Nash bargaining solution. Finally, by combining the genetic algorithm with distributed bandwidth allocation, we present a heuristic algorithm that solves the VNF scheduling problem in one stage. Using a multilayer encoding genetic algorithm, we simplify the constraints of the VNF scheduling problem and reduce its time complexity. At the same time, our Nash game solution refines the granularity of bandwidth allocation to further reduce the transmission delay between VNFs. The effectiveness of our proposed heuristic algorithm is verified through numerical evaluation. Compared with existing approaches,our method exhibits shorter scheduling time and reduces CPU time by 45% in simulated scenarios.

关键词： network function virtualization virtual network function scheduling genetic algorithm bandwidth allocation convex optimization

LTSS： Load-Adaptive Traffic Steering and Forwarding for Security Services in Multi-Tenant Cloud Datacenters

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2017年第6期32卷 1265-1278页

作者： Xue-Kai Du Zhi-Hui Lu Qiang Duan Jie Wu Cheng-Rong Wu School of Computer Science Fudan University Shanghai 200433 China Information Sciences and Technology Department the Pennsylvania State University Abington College Abington PA 19001 U.S.A.

Currently, different kinds of security devices are deployed in the cloud datacenter environment and tenants may choose their desired security services such as firewall and IDS （intrusion detection system）. At the same time, tenants in cloud computing datacenters are dynamic and have different requirements. Therefore, security device deployment in cloud datacenters is very complex and may lead to inefficient resource utilization. In this paper, we study this problem in a software-defined network （SDN） based multi-tenant cloud datacenter environment. We propose a load-adaptive traffic steering and packet forwarding scheme called LTSS to solve the problem. Our scheme combines SDN controller with TagOper plug-in to determine the traffic paths with the minimum load for tenants and allows tenants to get their desired security services in SDN-based datacenter networks. We also build a prototype system for LTSS to verify its functionality and evaluate performance of our design.

关键词： cloud datacenter software-defined network security service network security virtualization network function virtualization traffic steering

AdaptNF: Adaptive service chain scheduling with stateless migration and NF consolidation

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Digital Communications and networks 2023年第2期9卷 462-472页

作者： Qing Li He Huang Yong Jiang Jingpu Duan Peng Cheng Laboratory Shenzhen518000China Tsinghua Shenzhen International Graduate School Shenzhen10003China Southern University of Science and Technology Shenzhen14325China

The combination of network function virtualization and software-defined networking allows various network functions to process flows according to their characteristics and *** to the highly dynamic nature of the workload,the network infrastructure needs to properly schedule the underlying resources in order to respond to workload changes in a timely ***,the existing NFV platform lacks a comprehensive solution for how to scale under workload variation,which may seriously hurt the overall system *** improve the scalability of the NFV platform and ensure consistent high performance under dynamic workloads,we propose AdaptNF,a novel NFV platform designed to support a combination of course-grained and fine-grained resource scheduling *** deal with resource imbalance,which is the essential scheduling problem that leads to insufficient NFV performance,AdaptNF adopts a novel algorithm that can efficiently balance the workload among multiple network function instances through stateless flow *** controlled experiments show that the AdaptNF scheme can optimize resource allocation and ensure outstanding performance after *** terms of network throughput and latency,AdaptNF significantly improves the performance of the underlying NFV platform.

关键词： network function virtualization Software-defined networking Service chain Flow migration Dynamic scale

Recent advances and future challenges for mobile network virtualization

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2017年第4期60卷 5-16页

作者： Xiaofeng TAO Yan HAN Xiaodong XU Ping ZHANG Victor C.M.LEUNG National Engineering Lab for Mobile network Technologies Beijing University of Posts and Telecommunications State Key Lab of networking & Switching Technology Beijing University of Posts and Telecommunications Department of Electrical and Computer Engineering The University of British Columbia

Recently, network function virtualization(NFV) was proposed as a paradigm shift in the telecommunication industry. Both industry and academia have drawn significant attention in mobile network *** decouples the software implementation of network functions from the underlying hardware, leading to considerable reductions in operating expenses(OPEX) and capital expenses(CAPEX), and facilitating the network deployment. However, as an emerging technology, NFV brings both challenges and opportunities in developing new architectures, applying and deployment. In this paper, we first survey the related work of NFV, and then propose promising research directions in this area.

关键词： network function virtualization mobile networks software defined networking network functions 5G network slicing

VNF-FG design and VNF placement for 5G mobile networks

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2017年第4期60卷 17-31页

作者： Jiuyue CAO Yan ZHANG Wei AN Xin CHEN Jiyan SUN Yanni HAN State Key Laboratory of Information Security Institute of Information EngineeringChinese Academy of Sciences

network function virtualization(NFV) is envisioned as one of the critical technologies in 5thGeneration(5G) mobile networks. This paper investigates the virtual network function forwarding graph(VNFFG) design and virtual network function(VNF) placement for 5G mobile networks. We first propose a two-step method composed of flow designing and flow combining for generating VNF-FGs according to network service requests. For mapping VNFs in the generated VNF-FG to physical resources, we then modify the hybrid NFV environment with introducing more types of physical nodes and mapping modes for the sake of completeness and practicality, and formulate the VNF placement optimization problem for achieving lower bandwidth consumption and lower maximum link utilization simultaneously. To resolve this problem, four genetic algorithms are proposed on the basis of the frameworks of two existing algorithms(multiple objective genetic algorithm and improved non-dominated sorting genetic algorithm). Simulation results show that Greedy-NSGA-II achieves the best performance among our four algorithms. Compared with three non-genetic algorithms(random, backtracking mapping and service chains deployment with affiliation-aware), Greedy-NSGA-II reduces 97.04%, 87.76% and88.42% of the average total bandwidth consumption, respectively, and achieves only 13.81%, 25.04% and 25.41%of the average maximum link utilization, respectively. Moreover, using our VNF-FG design method and GreedyNSGA-II together can also reduce the total bandwidth consumption remarkably.

关键词： network function virtualization VNF-FG design VNF placement multi-objective optimization genetic algorithm

A virtual service placement approach based on improved quantum genetic algorithm

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Information Technology & Electronic Engineering 2016年第7期17卷 661-671页

作者： Gang XIONG Yu-xiang HU Le TIAN Ju-long LAN Jun-fei LI Qiao ZHOU National Digital Switching System Engineering&Technological Research Center Zhengzhou 450002China Department of Mathematics and Computer Science University of AntwerpAntwerp 2020Belgium

Despite the critical role that middleboxes play in introducing new network functionality,management and innovation of them are still severe challenges for network operators,since traditional middleboxes based on hardware lack service flexibility and ***,though new networking technologies,such as network function virtualization(NFV) and softwaredefined networking(SDN),are considered as very promising drivers to design cost-efficient middlebox service architectures,how to guarantee transmission efficiency has drawn little attention under the condition of adding virtual service process for ***,we focus on the service deployment problem to reduce the transport delay in the network with a combination of NFV and ***,a framework is designed for service placement decision,and an integer linear programming model is proposed to resolve the service placement and minimize the network transport *** a heuristic solution is designed based on the improved quantum genetic *** results show that our proposed method can calculate automatically the optimal placement *** scheme can achieve lower overall transport delay for a network compared with other schemes and reduce 30% of the average traffic transport delay compared with the random placement scheme.

关键词： Software-defined networking(SDN) network function virtualization Quantum genetic algorithm Middlebox

维普期刊数据库

A Solution Supporting Secure Transmission of Big Data

在线全文

学校读者我要写书评

暂无评论

Tsinghua Science and Technology 2023年第5期28卷 838-848页

作者： Haonan Ling Yan Gao Huibin Wang Ming Chen Institute of Computer Science and Technology Nanjing University of Aeronautics and AstronauticsNanjing 211106China China Electronic Systems Engineering Corporation Beijing 100840China College of Computer and Information Engineering Chuzhou UniversityChuzhou 239000

Traditional Internet protocol networks cannot provide the service of selecting a secure path to transmit various types of data with specific security ***,to solve the“secure path transmission”problem,this paper first proposes a search-transmit model for secure network path transmission,i.e.,to find a multi-attribute optimized path that meets the specific security requirements in the search phase,and then transmit the packets along the optimized path in the transmission ***,we propose a solution to the search-transmit *** idea of the solution is to use the particle swarm optimization algorithm to search for a secure path that meets the multi-attribute requirements and then set the source route on the router to control the packet ***,a prototype system based on network function virtualization is developed to evaluate the feasibility and performance of the proposed *** results show that the proposed solution outperforms existing algorithms in terms of performance.

关键词： network secure path search-transmit model multi-attribute path optimization segment routing network function virtualization

5G Features from Operation Perspective and Fundamental Performance Validation by Field Trial

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

China Communications 2018年第11期15卷 33-50页

作者： Guangyi Liu Yuhong Huang Fei Wang Jianjun Liu Qixing Wang China Mobile Research Institute Beijing 100053 China

The fast deployment and penetration of 4G has cultivated human behaviors on mobile data consumption, leading to explosive growth in mobile traffic and stimulating new requirements on the capabilities of mobile networks. To meet the requirements of mobile networks toward year 2020, the next genera- tion of mobile networks （termed as IMT-2020, or 5G） is designed to support 100 Mbps-1 Gbps user-experienced data rate, 1 ms radio transmission latency, and 1 million connec- tions per square kilometer. Recalling the vision and requirements of 5G targeting for commer- cial launch in 2020, this article overviews the key features of 5G and compares with those of 4G, and reports the world first field trials conducted to validate the key performance of 5G radio interface in *** band. The trial results show that a 1 ms transmission latency and 1 Gbps data rate are achievable.

关键词： 5G IMT-2020 3D-MIMO usercentric network software defined network network function virtualization field trial

维普期刊数据库