检索结果-内蒙古大学图书馆

18th USENIX Symposium on networked Systems Design and Implementation

作者： Liu, Guyue Sadok, Hugo Kohlbrenner, Anne Parno, Bryan Sekar, Vyas Sherry, Justine Carnegie Mellon Univ Pittsburgh PA 15213 USA Princeton Univ Princeton NJ 08544 USA

ISBN: (纸本)9781939133212

Auditing is a crucial component of network security practices in organizations with sensitive information, such as banks and hospitals. Unfortunately, networkfunction virtualization (NFV) is viewed as incompatible with auditing practices which verify that security functions operate correctly. In this paper, we bring the benefits of NFV to security-sensitive environments with the design and implementation of AuditBox. AuditBox not only makes NFV compatible with auditing, but also provides stronger guarantees than traditional auditing procedures. In traditional auditing, administrators test the system for correctness on a schedule, e.g., once per month. In contrast, AuditBox continuously self-monitorsfor correct behavior, proving runtime guarantees that the system remains in compliance with policy goals. Furthermore, AuditBox remains compatible with traditional auditing practices by providing sampled logs which still allow auditors to inspect system behavior manually. AuditBox achieves its goals by combining trusted execution environments with a lightweight verified routing protocol (VRP). Despite the complexity of routing policies for service-function chains relative to traditional routing, AuditBox's protocol introduces 72-80% fewer bytes of overhead per packet (in a 5-hop service chain) and provides 61-67% higher goodput than prior work on VRPs designed for the Internet.

关键词： network function virtualization

来源：评论

学校读者我要写书评

暂无评论

Demo: Application Monitoring as a network Service 41

Demo: Application Monitoring as a Network Service

引用

41st IEEE International Conference on Distributed Computing Systems (ICDCS)

作者： Elsaadawy, Mona Fesselier, Laetitia Kemme, Bettina McGill Univ Sch Comp Sci Montreal PQ Canada

ISBN: (纸本)9781665445139

The recent rise of cloud applications, representing large complex modern distributed services, has made performance monitoring a major issue and a critical process for both cloud providers and cloud customers. Many different monitoring techniques are used such as tracking resource consumption, performing application-specific measures or analyzing message exchanges. Typically the collected data is logged at the host on which the application is deployed, then either analyzed locally or forwarded to a remote analysis host. In contrast, this demonstration paper presents a Monitoring as a Service prototype that uses the advances in Software Defined networking (SDN) to move some of the logging functionality into the network. The core of our MaaS is implemented as a virtual network function where agents are co-located with software switches in order to extract performance metrics from the message flows between components in a non-intrusive manner and send the calculated measures to the clients for visualization in near real-time. The MaaS has a lot of flexibility in how it is deployed and does not require to instrument software or platforms. In our demo we show the tool in action demonstrating how users can choose to monitor different service types and performance metrics in a user-friendly manner.

关键词： Application performance monitoring Software defined networking network function virtualization

来源：评论

学校读者我要写书评

暂无评论

A Novel Layer Pruning Method Based on Graph Structure of Feature Representations for Specific Emitter Identification

引用

IEEE Transactions on Cognitive Communications and networking 2025年

作者： Yang, Ning Zhang, Bangning Ding, Guoru Guo, Daoxing Army Engineering University of PLA College of Communications and Engineering Nanjing210007 China

As an emerging method for physical layer security authentication, Specific Emitter Identification (SEI) plays a pivotal role in wireless communication network security. Leveraging its strong feature extraction capabilities, deep learning has exhibited excellent performance in SEI. However, most network architectures have many parameters, e.g., AlexNet, VGG, and ResNet. This brings a challenge for their deployment in devices especially those with constrained computation capacities. To address above concerns, this paper proposes a layer pruning method based on the graph structure of feature representations, which can simultaneously lightweight the neural network architecture, decrease the model complexity, and maintain the identification performance. This paper maps feature representations into a dynamic graph evolution process and determines redundant parameters based on the community detection of the graph. Moreover, the pruning process operates at the layer level, making it more convenient and not affecting the existing neural network training process. Experimental results demonstrate that the method can significantly reduce computational complexity, and the pruned models exhibit comparable or even better performance compared to the original models on multiple datasets. For instance, when compressing the computational cost of VGG16 by 95.4%, the identification accuracy is improved by 1.22%. © 2015 IEEE.

关键词： network function virtualization

来源：评论

学校读者我要写书评

暂无评论

EmcFIS: Evolutionary multi-criteria Fuzzy Inference System for virtual network function placement and routing

引用

APPLIED SOFT COMPUTING 2022年 117卷

作者： Zahedi, Seyed Reza Jamali, Shahram Bayat, Peyman Islamic Azad Univ Rasht Branch Dept Comp Engn Rasht Iran Univ Mohaghegh Ardabili Dept Comp Engn Ardebil Iran

With the increasing demands for low-delay network services, mobile edge computing (MEC) has emerged as an appealing solution to provide computing resources in close to the end users. network function virtualization (NFV) is a new network architecture which replaces dedicated hardware middleboxes with software instances to run network functions via software virtualization on generalpurpose servers deployed at edge clouds. Because of the resource limitation at network edges, efficient placement and routing for online virtual network function requests (VNF-PRO) is a challenging task. The VNF-PRO has proven to be NP-hard, and thus, metaheuristic algorithms are the best choice in term of the solution quality. However, metaheuristics suffer from high computational complexity, and cannot be performed for online requests in the VNF-PRO. In this paper, a combined model based on fuzzy logic and genetic algorithm is proposed to achieve proper solution quality-speed trade-off in the VNF-PRO. In this method, a multi-criteria fuzzy inference system (named mcFIS) is used for the online VNF placement and routing. To achieve the best performance, a multi-objective evolutionary algorithm based on genetic algorithm (GA) is utilized in an offline procedure for automatic rule tuning of the mcFIS, once before applying it for online applications. Simulation results on two NFV benchmark instances demonstrate the efficiency of the proposed model against the existing techniques.(c) 2022 Elsevier B.V. All rights reserved.

关键词： network function virtualization Edge clouds Virtual network function Service function chain Fuzzy inference system Genetic algorithm

来源：评论

学校读者我要写书评

暂无评论

SCHEMA: Service Chain Elastic Management with Distributed Reinforcement Learning

SCHEMA: Service Chain Elastic Management with Distributed Re...

引用

IEEE Global Communications Conference (GLOBECOM)

作者： Dalgkitsis, Anestis Garrido, Luis A. Mekikis, Prodromos-Vasileios Ramantas, Kostas Alonso, Luis Verikoukis, Christos Iquadrat Informat SL Barcelona Spain Telecommun Technol Ctr Catalonia CTTC CERCA Barcelona Spain Univ Politecn Catalunya UPC Signal Theory & Commun Dept Barcelona Spain

ISBN: (纸本)9781728181042

As the demand for network function virtualization accelerates, service providers are expected to advance the way they manage and orchestrate their network services to offer lower latency services to their future users. Modern services require complex data flows between Virtual network functions, placed in separate network domains, risking an increase in latency that compromises the offered latency constraints. This shift requires high levels of automation to deal with the scale and load of future networks. In this paper, we formulate the Service function Chaining (SFC) placement problem and then we tackle it by introducing SCHEMA, a Distributed Reinforcement Learning (RL) algorithm that performs complex SFC orchestration for low latency services. We combine multiple RL agents with a Bidding Mechanism to enable scalability on multi-domain networks. Finally, we use a simulation model to evaluate SCHEMA, and we demonstrate its ability to obtain a 60.54% reduction of average service latency when compared to a centralised RL solution.

关键词： Zero-touch Orchestration network function virtualization SFC Placement Distributed Reinforcement Learning

来源：评论

学校读者我要写书评

暂无评论

Economic Denial of Sustainability (EDoS ) Detection using GANs in SDN-based Cloud 8

Economic Denial of Sustainability (EDoS ) Detection using GA...

引用

8th IEEE International Conference on Communications and Electronics (IEEE ICCE)

作者： Dinh, Phuc Trinh Park, Minho Soongsil Univ Dept Informat Commun Mat & Chem Convergence Techn Seoul 156743 South Korea Soongsil Univ Sch Elect Engn Seoul 156743 South Korea

ISBN: (纸本)9781728154718

Cloud computing is now considered to be the most cost-effective platform for offering business and consumer IT services over the Internet. However, it is prone to new vulnerabilities. Specifically, a newly discovered type of attack, called an economic-denial-of-sustainability attack known as EDoS, exploits the pay-per-use model to scale up the resource usage over time to the degree that the cloud user has to pay for the unexpected usage charge. To prevent EDoS attacks, we propose an effective solution in the SDN-based cloud computing environment. We first introduce a machine-learning-based approach adopting a framework called MAD-GAN which applies an unsupervised multivariate anomaly detection technique based on Generative Adversarial networks (GANs), using the Long-Short-Term-Memory Recurrent Neural networks (LSTM-RNN) to detect EDoS attacks. Its main idea is to produce an anomaly score at each time step by learning a multivariate attribute. We then generate a dynamic threshold score to compare with the anomaly score produced to classify the network traffic as EDoS traffic or normal traffic. By realistic tests, our proposed scheme is demonstrated to outperform existing methods for EDoS attack detection. The detailed experiments conducted with different levels of EDoS attacks show that the proposed scheme is an efficient, innovative approach to defend EDoS attacks in the SDN-based cloud.

关键词： Cloud computing security economic denial of sustainability (EDoS) software-defined networking machine learning network function virtualization

来源：评论

学校读者我要写书评

暂无评论

Agile and Dynamic Virtualized network functions Wiring in network Services 14

Agile and Dynamic Virtualized Network Functions Wiring in Ne...

引用

IEEE 14th International Conference on Cloud Computing (CLOUD)

作者： Nouar, Nour el Houda Yangui, Sami Faci, Noura Drira, Khalil Tazi, Said Univ Toulouse 1 Capitole LAAS CNRS Toulouse France Univ Toulouse INSA LAAS CNRS Toulouse France Univ Claude Bernard LIRIS CNRS Lyon France LAAS CNRS Toulouse France

ISBN: (纸本)9781665400602

The European Telecommunications Standards Institute (ETSI) established the key reference architectural framework for network function virtualization (NFV). The NFV framework supports several phases (e.g., design, deploy, and manage) that make up the life-cycle of Virtual network functions (VNFs) along with their connectivity through the network Service (NS) concept. Furthermore, coupled with Software-Relined networking (SDN), NFV provides a dynamic reshaping of the network control plane. For a proper NS provisioning, network providers should anticipate and handle all the possible and practical VNFs composition scenarios, even those that are either rarely or never used. This results in costly, tedious, and time-consuming procedures when designing, deploying, and managing NSs. To overcome these limitations, NSs can be further improved by using techniques that have not been deeply explored yet. In this paper, we advocate for routing VNFs with re-configurable wiring capabilities as a novel concept that would allow agile and dynamic VNFs wiring from design-time to run-time. To validate this work, we developed a proof-of-concept as a plugin on top of ETSI Open Source MANO, as well as, a running vehicle platooning prototype. The performed experiments show that our approach: (i) performs better than the SDN-based solution in terms of latency and Mean Time-To-Operation (MTTO), and (ii) shows that the associated cost, with regard to SDN-based solution, remains acceptable.

关键词： Dynamic Re-configurable Wiring ETSI MANO network function virtualization network Service

来源：评论

学校读者我要写书评

暂无评论

QoS-Aware Mapping and Scheduling for Virtual network functions in Industrial 5G-TSN network

QoS-Aware Mapping and Scheduling for Virtual Network Functio...

引用

IEEE Global Communications Conference (GLOBECOM)

作者： Zhang, Yajing Xu, Qimin Li, Mingyan Chen, Cailian Guan, Xinping Shanghai Jiao Tong Univ Dept Elect Shanghai 200240 Peoples R China Minist Educ China Key Lab Syst Control & Informat Proc Shanghai 200240 Peoples R China Shanghai Jiao Tong Univ Dept Automat Shanghai 200240 Peoples R China Chongqing Univ Coll Comp Sci Chongqing 400044 Peoples R China

ISBN: (纸本)9781728181042

Driven by the advantages of the ubiquitous connection of 5G and the determinacy of Time-Sensitive networking (TSN), the integration of 5G and TSN is expected to provide flexible and deterministic communications for the industry. However, due to the diverse quality of service (QoS) demands of industrial applications, it is challenging to provide suitable QoS mapping across industrial 5G-TSN networks and offer dynamic services via heterogeneous infrastructures. To address this issue, we design a QoS-aware dynamic data injection scheme to realize the interconnection between 5G and TSN under edge-assisted 5G-TSN architecture. To break the tight coupling between applications and infrastructures, we focus on the virtual network function (VNF) mapping problems to facilitate the QoS provisioning for different applications leveraging the network function virtualization (NFV) technique. We first formulate it as a mixed integer linear programming (MILP) with time-sensitive constraints. Then we develop PVMS, a preemption-based two-stage heuristic algorithm for VNF mapping and scheduling in the 5G-TSN network. In particular, we dynamically map the VNFs of arrived applications by greedily searching the earliest available 5G-TSN resources. To further meet the low-latency requirements, we employ a preemption mechanism to provide no-wait transmission for higher priority applications at the cost of the preempted applications being postponed. Simulation results demonstrate that the proposed PVMS has better performance in terms of the acceptance ratio, average delay, and QoS guarantee.

关键词： SG-TSN network QoS-aware data injection network function virtualization virtual network function preemption-based scheduling

来源：评论

学校读者我要写书评

暂无评论

Service Chain Provisioning Model Considering Traffic Amount Changed by Virtualized network functions 22

Service Chain Provisioning Model Considering Traffic Amount ...

引用

IEEE 22nd International Conference on High Performance Switching and Routing (IEEE HPSR)

作者： Ozaki, Shintaro Sato, Takehiro Oki, Eiji Kyoto Univ Kyoto Japan

ISBN: (纸本)9781665440059

This paper proposes a service chain provisioning model considering traffic changing effects of virtualized network functions (VNFs) while determining the VNF visit order of each request, routes of requests, and VNF placement. The service chain provisioning problem is formulated as an integer linear programming (ILP) problem. Three methods of limiting the number of VNF visit order patterns considered in the ILP problem are introduced in order to shorten the computation time. These methods select visit order patterns so as to suppress the sum of the traffic amount reserved by each request on its route. Numerical results show that the consumption of network and computation resources becomes more efficient by considering traffic amount changed by VNFs than the case assuming the traffic amount of each request to be constant end-to-end. The results also show that the computation time can be shortened in our examined scenarios while we obtain the objective value larger by at most 0.4% than the optimal value by limiting the number of visit order patterns.

关键词： network function virtualization service chaining traffic changing effect integer linear programming

来源：评论

学校读者我要写书评

暂无评论

Using Self-Organizing Maps for the Behavioral Analysis of Virtualized network functions 1

引用

10th International Conference on Cloud Computing and Services Science (CLOSER)

作者： Lanciano, Giacomo Ritacco, Antonio Brau, Fabio Cucinotta, Tommaso Vannucci, Marco Artale, Antonino Barata, Joao Sposato, Enrica Scuola Super Sant Anna Pisa Italy Scuola Normale Super Pisa Pisa Italy Vodafone Milan Italy Vodafone Lisbon Portugal

ISBN: (数字)9783030723699

ISBN: (纸本)9783030723682;9783030723699

Detecting anomalous behaviors in a network function virtualization infrastructure is of the utmost importance for network operators. In this paper, we propose a technique, based on Self-Organizing Maps, to address such problem by leveraging on the massive amount of historical system data that is typically available in these infrastructures. Indeed, our method consists of a joint analysis of system-level metrics, provided by the virtualized infrastructure monitoring system and referring to resource consumption patterns of the physical hosts and the virtual machines (or containers) that run on top of them, and application-level metrics, provided by the individual virtualized network functions monitoring subsystems and related to the performance levels of the individual applications. The implementation of our approach has been validated on real data coming from a subset of the Vodafone infrastructure for network function virtualization, where it is currently employed to support the decisions of data center operators. Experimental results show that our technique is capable of identifying specific points in space (i.e., components of the infrastructure) and time of the recent evolution of the monitored infrastructure that are worth to be investigated by human operators in order to keep the system running under expected conditions.

关键词： Self-organizing maps Machine learning network function virtualization

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：