检索结果-内蒙古大学图书馆

Availability-aware and energy-aware dynamic SFC placement using reinforcement learning

JOURNAL OF SUPERCOMPUTING 2021年第11期77卷 12711-12740页

作者： Santos, Guto Leoni Lynn, Theo Kelner, Judith Endo, Patricia Takako Univ Fed Pernambuco UFPE Ctr Informat Recife PE Brazil Dublin City Univ Business Sch Dublin Ireland Univ Pernambuco UPE Recife PE Brazil

Software-defined networking and network functions virtualisation are making networks programmable and consequently much more flexible and agile. To meet service-level agreements, achieve greater utilisation of legacy networks, faster service deployment, and reduce expenditure, telecommunications operators are deploying increasingly complex service function chains (SFCs). Notwithstanding the benefits of SFCs, increasing heterogeneity and dynamism from the cloud to the edge introduces significant SFC placement challenges, not least adding or removing network functions while maintaining availability, quality of service, and minimising cost. In this paper, an availability- and energy-aware solution based on reinforcement learning (RL) is proposed for dynamic SFC placement. Two policy-aware RL algorithms, Advantage Actor-Critic (A2C) and Proximal Policy Optimisation (PPO), are compared using simulations of a ground truth network topology based on the Rede Nacional de Ensino e Pesquisa network, Brazil's National Teaching and Research network backbone. The simulation results show that PPO generally outperformed A2C and a greedy approach in terms of both acceptance rate and energy consumption. The biggest difference in the PPO when compared to the other algorithms relates to the SFC availability requirement of 99.965%;the PPO algorithm median acceptance rate is 67.34% better than the A2C algorithm. A2C outperforms PPO only in the scenario where network servers had a greater number of computing resources. In this case, the A2C is 1% better than the PPO.

关键词： Service function chains Placement network function virtualisation Service function chain placement Reinforcement learning Availability optimisation Energy consumption optimisation

来源：评论

学校读者我要写书评

暂无评论

network slicing: a next generation 5G perspective

引用

EURASIP JOURNAL ON WIRELESS COMMUNICATIONS AND networkING 2021年第1期2021卷 1-26页

作者： Subedi, Prashant Alsadoon, Abeer Prasad, P. W. C. Rehman, Sabih Giweli, Nabil Imran, Muhammad Arif, Samrah Charles Sturt Univ Sch Comp & Math Sydney NSW Australia Univ Western Sydney UWS Sch Comp Data & Math Sci Sydney NSW Australia Charles Sturt Univ Sch Comp & Math Port Macquarie Australia King Saud Univ Coll Appl Comp Sci Riyadh Saudi Arabia

Fifth-generation (5G) wireless networks are projected to bring a major transformation to the current fourth-generation network to support the billions of devices that will be connected to the Internet. 5G networks will enable new and powerful capabilities to support high-speed data rates, better connectivity and system capacity that are critical in designing applications in virtual reality, augmented reality and mobile online gaming. The infrastructure of a network that can support stringent application requirements needs to be highly dynamic and flexible. network slicing can provide these dynamic and flexible characteristics to a network architecture. Implementing network slicing in 5G requires domain modification of the preexisting network architecture. A network slicing architecture is proposed for an existing 5G network with the aim of enhancing network dynamics and flexibility to support modern network applications. To enable network slicing in a 5G network, we established the virtualisation of the underlying physical 5G infrastructure by utilising technological advancements, such as software-defined networking and network function virtualisation. These virtual networks can fulfil the requirement of multiple use cases as required by creating slices of these virtual networks. Thus, abstracting from the physical resources to create virtual networks and then applying network slicing on these virtual networks enable the 5G network to address the increased demands for high-speed communication.

关键词： 5G communication Software-defined networks network slicing Slicing use cases network function virtualisation

来源：评论

学校读者我要写书评

暂无评论

A multi-stage graph based algorithm for survivable Service function Chain orchestration with backup resource sharing

引用

COMPUTER COMMUNICATIONS 2021年 174卷 42-60页

作者： Kibalya, Godfrey Serrat, Joan Gorricho, Juan-Luis Serugunda, Jonathan Zhang, Peiying Univ Politecn Cataluna Dept Network Engn C Jordi Girona 1-3Edif C3Campus Nord Barcelona 08034 Spain Makerere Univ Dept Elect & Comp Engn Kampala Uganda China Univ Petr East China Coll Comp Sci & Technol Qingdao 266580 Peoples R China

network softwarisation introduces flexibility in network management by enabling the deployment of network functions as software modules running on virtual machines. However, this creates new concerns for service availability and reliability due to multiple sources of failures at both software and hardware levels, potentially resulting in service degradations and penalties due to Service Level Agreement (SLA) violations. The survivability of critical services can best be guaranteed by pro-actively provisioning dedicated backup resources for these services, but at the cost of a high resource consumption. Aware of the divergent requirements of future services, a promising alternative is envisaged, allowing non-critical users to use the unused backup resources of high priority users. However, this approach poses a stringent challenge if a critical service disruption occurs, requiring the computation of a traffic rerouting solution for the non-critical requests when preempted from their borrowed resources. In this paper we first propose a generic multi-stage graph based algorithm as an alternative algorithm for Service function Chain (SFC) deployments. Simulation results demonstrate that the proposed algorithm is optimized in terms of resource utilization, resulting in a 10% improvement in terms of acceptance ratio compared to a given state of the art algorithm, and within a 4% margin of the optimal solution. Based on the mentioned algorithm, we propose a new migration-aware algorithm for the mapping of non-critical services, enabling the non-critical services to borrow the unused backup resources from the critical services while minimizing the probability of preemption they could experience. The migration-aware algorithm results in more than an 8% resource saving, in most scenarios, compared to a dedicated backup strategy, and more than a 70% performance improvement in terms of the number of service preemptions, compared to a cost based algorithm. Additionally, whenever

关键词： Service function Chaining Service reliability QoS embedding network function virtualisation

来源：评论

学校读者我要写书评

暂无评论

A comprehensive survey on machine learning approaches for malware detection in IoT-based enterprise information system

引用

ENTERPRISE INFORMATION SYSTEMS 2023年第3期17卷 Article: 2023764页

作者： Gaurav, Akshat Gupta, Brij B. Panigrahi, Prabin Kumar Ronin Inst Montclair NJ USA Natl Inst Technol Dept Comp Engn Kurukshetra Haryana India Asia Univ Dept Comp Sci & Informat Engn Taichung 413 Taiwan Staffordshire Univ Stoke On Trent ST4 2DE Staffs England Indian Inst Management Indore Indore India

The Internet of Things (IoT) is a relatively new technology that has piqued academics' and business information systems' attention in recent years. The Internet of Things establishes a network that enables smart devices in an organisational information system to connect to one another and exchange data with the central storage. Android apps are placed on Android apps to enhance the user-friendliness of IoT devices in business information systems, making them more interactive and user-friendly. However, the usage of Android apps makes IoT devices susceptible to all forms of malware attacks, including those that attempt to hack into IoT devices and get access to sensitive information stored in the corporate information system. The researchers offered a variety of attack mitigation approaches for detecting harmful malware embedded in an Android application operating on an IoT device. In this context, machine learning offered the most promising strategies to detect malware attacks in IoT-based enterprise information systems because of its better accuracy and precision. Its capacity to adapt to new forms of malware attacks is a result of its learning capabilities. Therefore, we conduct a detailed survey, which discusses emerging machine learning algorithms for detecting malware in business information systems powered by the Internet of Things. This article reviews all available research on malware detection, including static malware detection, dynamic malware detection, promoted malware detection and hybrid malware detection.

关键词： network function virtualisation enterprise information system IoT malware detection adversarial malware detection malware visualisation techniques sandboxing

来源：评论

学校读者我要写书评

暂无评论

Energy Efficiency in Edge Environments: a Serverless Computing Approach 18th

Energy Efficiency in Edge Environments: a Serverless Computi...

引用

18th International Conference on the Economics of Grids, Clouds, Systems, and Services (GECON )

作者： Djemame, Karim Univ Leeds Sch Comp Leeds W Yorkshire England

ISBN: (纸本)9783030929169;9783030929152

The paper revisits the Internet Architecture by leveraging Software Defined networks (SDN) with network function virtualisation (NFV) technologies to allow efficient and on-demand placement of Virtual network functions (VNF) on a serverless platform for energy-aware function provisioning in edge environments. Edge computing is seen as critical for supporting the next generation of services and applications that demand high speeds and low-latencies though energy consumption is a matter of concern. Serverless computing as a paradigm in virtualisation is considered as a low-latency and a rapidly deployable alternative to traditional virtualisation approaches. Event-triggered serverless functions incentivise energy efficient resource usage and provide granular reporting on a function level. The research will develop a new building block that satisfies the services performance while reducing the energy consumption in edge environments.

关键词： Serverless computing Energy efficiency Software Defined networks network function virtualisation

来源：评论

学校读者我要写书评

暂无评论

Towards QoS-aware Provisioning of Chained Virtual Security Services in Edge networks 17

Towards QoS-aware Provisioning of Chained Virtual Security S...

引用

IFIP/IEEE International Symposium on Integrated network Management (IM)

作者： Iordache-Sica, Mircea M. Anagnostopoulos, Christos Pezaros, Dimitrios P. Univ Glasgow Sch Comp Sci Glasgow G12 8QQ Lanark Scotland

ISBN: (纸本)9783903176324

Future networks are expected to deliver low-latency, user-specific services in a flexible and efficient manner. Operators have to ensure infrastructure resilience in the face of such challenges, while maintaining service guarantees for subscribed users. One approach to support emerging use cases is through the introduction and user of virtualised network functions (VNFs) at the edge of the network. While placement of VNFs at the network edge has been previously studied, it has not taken into account services comprised of multiple VNFs and considerations for network security. In this paper we propose a mathematical model for latency-optimal on-path allocation of VNF chains on physical servers within an edge network infrastructure, with special considerations for network security applications and operator's best practices. We acknowledge the challenges of employing optimal solutions in real networks and provide the Minimal Path Deviation Allocation algorithm for placement of security-focused network services in a distributed edge environment, minimising end-to-end latency for users. We then evaluate our placement results over a simulated nation-wide network using real-world latency characteristics. We show that our placement algorithm provides near-optimal placement, with minimal latency violations with respect an optimal solution, whilst offering robust tolerance to temporal latency variations.

关键词： network function virtualisation network Service Placement network Service Chaining Context-based Security network Security

来源：评论

学校读者我要写书评

暂无评论

Automating the Service function Chain Availability Assessment 26

Automating the Service Function Chain Availability Assessmen...

引用

26th IEEE Symposium on Computers and Communications (IEEE ISCC)

作者： Santos, Guto Leoni Endo, Patricia Takako Lynn, Theo Sadok, Djamel Kelner, Judith Univ Fed Pernambuco Recife PE Brazil Univ Pernambuco Recife PE Brazil Dublin City Univ Dublin Ireland

ISBN: (纸本)9781665427449

Modern telecommunications networks are characterised by increased dynamism and heterogeneity from the cloud to the edge. To meet these requirements and remain competitive, network operators use software defined networking (SDN) and network functions virtualisation (NFV) to make networks programmable, flexible, and agile. Service function chaining (SFC) enables NFV through the ordered sequencing of VNFs and subsequent steering of flows through them to provide end-to-end services. SFCs must meet availability constraints while avoiding resource wastage due to unnecessary redundancy. This paper proposes a novel approach to evaluate the availability of SFC placement considering the associated redundancy strategies using Stochastic Petri Net (SPN) models. We propose an algorithm to generate and resolve relatively small SPN models for SFC availability in an automatic way and then compare baseline SPN models with this algorithm across five SFC placement scenarios. In all scenarios, the proposed algorithm outperformed baseline SPN models in runtime performance.

关键词： Service function chains Placement network function virtualisation availability Stochastic Petri Net

来源：评论

学校读者我要写书评

暂无评论

Techniques for Securing Control Systems from Attacks 20

Techniques for Securing Control Systems from Attacks

引用

20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom)

作者： Tupakula, Uday Varadharajan, Vijay Karmakar, Kallol Krishna Univ Newcastle Adv Cyber Secur Engn Res Ctr Newcastle NSW Australia

ISBN: (纸本)9781665416580

Increasingly Industrial Control Systems (ICS) systems are being connected to the Internet to minimise the operational costs and provide additional flexibility. These control systems such as the ones used in power grids, manufacturing and utilities operate continually and have long lifespans measured in decades rather than years as in the case of IT systems. Such industrial control systems require uninterrupted and safe operation. However, they can be vulnerable to a variety of attacks, as successful attacks on critical control infrastructures could have devastating consequences to the safety of human lives as well as a nation's security and prosperity. Furthermore, there can be a range of attacks that can target ICS and it is not easy to secure these systems against all known attacks let alone unknown ones. In this paper, we propose a software enabled security architecture using Software Defined networking (SDN) and network function virtualisation (NFV) that can enhance the capability to secure industrial control systems. We have designed such an SDN/NFV enabled security architecture and developed a Control System Security Application (CSSA) in SDN Controller for enhancing security in ICS against certain specific attacks namely denial of service attacks, from unpatched vulnerable control system components and securing the communication flows from the legacy devices that do not support any security functionality. In this paper, we discuss the prototype implementation of the proposed architecture and the results obtained from our analysis.

关键词： Control System Security Software Defined networking (SDN) network function virtualisation Security Architecture Security Attacks

来源：评论

学校读者我要写书评

暂无评论

Management and enforcement of secured E2E network slices across transport domains

引用

OPTICAL FIBER TECHNOLOGY 2022年第0期73卷

作者： Alemany, Pol Molina, Alejandro Dangerville, Cyril Asensio, Rodrigo Ayed, Dhouha Munoz, Raul Casellas, Ramon Martinez, Ricardo Skarmeta, Antonio Vilalta, Ricard Ctr Tecnol Telecomunicac Catalunya CTTC CERCA Carl Friedrich Gauss Av 7 Castelldefels 08860 Catalonia Spain Univ Murcia Comp Sci Fac Campus Espinardo Murcia 30100 Spain Thales 1 Av Augustin Fresnel F-91120 Palaiseau Essonne France

Due to the fact that the current variability of services is brought by the current networks and the new possibilities that will appear thanks to the near-future networks, network Slicing has become one of the key elements to allow the co-existence of multiple computing and transportservices with different requirements (i.e., performance, security, isolation) over the same infrastructure in multi-tenant and multi-domain (i.e., edge, transport, core) scenarios. The use of this and other technologies allow to have only one generic infrastructure (e.g., an optical transport domain) despite the services differences, instead of needing specific resources (e.g., on single optical fiber) for each type of service. Multiple works have been published about network Slicing, network function Virtualization and Software Defined networks using multiple computing and transport domains but, based on our literature research, there is one important aspect with a low amount of attention: the security management around network slices and their enforcement. It is essential to ensure that the expected Quality of Security (QoSec) is accomplished based on the correct deployment and posterior monitoring of the security metrics defined in the agreed Security Service Level Agreement (SSLA) between the service requester and the provider. This article aims to present an architecture designed to manage and control the life-cycle of secured End-to -End (E2E) network slices involving multiple domains based on the SSLA requirements. The security management architecture is described with its components together with the deployment and monitoring processes and the data objects used. Finally, an experimental validation is described using the use case of a DoS attack scenario and its resolution.

关键词： network slicing Security service level agreement network function virtualisation Quality of service

来源：评论

学校读者我要写书评

暂无评论

Counteracting Attacks From Malicious End Hosts in Software Defined networks

引用

IEEE TRANSACTIONS ON network AND SERVICE MANAGEMENT 2020年第1期17卷 160-174页

作者： Varadharajan, Vijay Tupakula, Uday Univ Newcastle Fac Engn & Built Environm Newcastle NSW 2308 Australia Univ Newcastle Sch Elect Engn & Comp Newcastle NSW 2308 Australia

This paper proposes security techniques for counteracting attacks from malicious end hosts in a software defined networking (SDN) environment. This paper describes the design of a security architecture, which comprises a security management application running in the SDN controller for specifying and evaluating security policies, and security components in the switches for enforcing these security policies on network flows. Our proposed security solution helps to detect the attacking end hosts even before the flow requests from the malicious end hosts are forwarded to the SDN controller. Furthermore, if the end hosts become malicious after the interactions with the SDN controller and generate attacks in the data plane, then our architecture has mechanisms to address these attacks that occur after the establishment of routes by the SDN controller. The domain wide network visibility of the SDN controller enables our security architecture to achieve dynamic management of the security policies. The enforcement of security policies in the data plane is tailored to the functionality available in the network switches, making the proposed security solution practical. We describe the implementation of the proposed security architecture and analyze its security and performance characteristics. We also discuss the advantages of the proposed security architecture over existing solutions.

关键词： Security Control systems Computer architecture Protocols Virtual machine monitors Software Servers Software defined networking security security architecture state based security attack detection SDN security policies network function virtualisation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：