检索结果-内蒙古大学图书馆

A network function virtualization Architecture for Automatic and Efficient Detection and Mitigation against Web Application Malware

引用

JOURNAL OF INTERNET SERVICES AND APPLICATIONS 2023年第1期13卷

作者： Mauricio, Leopoldo Rubinstein, Marcelo Univ Fed Rio de Janeiro Av Horacio Macedo2030Ctr Tecnol Sala H-301Cidad BR-21941598 Rio De Janeiro RJ Brazil Univ Estado Rio de Janeiro Rio De Janeiro RJ Brazil

This paper proposes and implements a network function virtualization (NFV) security architecture to provide automatic and efficient detection and mitigation against Web application malware. The mitigation is given by dynamically chaining a Virtual Security function (VSF) to the data stream to block malicious exploitation traffic without affecting the benign traffic. We implement an NFV Security Controller (NFV-SC) that interacts with an Intrusion Detection System and a Web Application Firewall (WAF), both implemented as VSFs. We also implement a vulnerability scanner and a mechanism to automatically create rules in advance in the WAF-VSF when a security vulnerability is found in an application, even if no malicious traffic has attempted to exploit the flaw. In addition, it dynamically identifies and removes no longer used security rules to improve performance. We implement and evaluate our security proposal in the Open Platform for NFV (OPNFV). The evaluation results in our experimen-tal scenarios show that the NFV security architecture automatically blocks 99.12% of the HTTP malicious traffic without affecting 93.6% of the benign HTTP requests. Finally, we show that the number of rules in the WAF-VSF severely affects the latency to load HTTP response headers and that the number of redirection OpenFlow rules within Open vSwitches is not enough to significantly impact the end-user experience in modern web browser applications.

关键词： Security Malware network function virtualization Software -Defined networking

来源：评论

学校读者我要写书评

暂无评论

Gost: Enabling Efficient Spatio-Temporal GPU Sharing for network function virtualization 29

Gost: Enabling Efficient Spatio-Temporal GPU Sharing for Net...

引用

29th IEEE/ACM International Symposium on Quality of Service (IWQOS)

作者： Zhu, Andong Zeng, Deze Gu, Lin Li, Peng Chen, Quan China Univ Geosci Sch Comp Sci Wuhan Peoples R China Huazhong Univ Sci & Technol Sch Comp Sci & Technol Wuhan Peoples R China Univ Aizu Sch Comp Sci & Engn Aizu Wakamatsu Fukushima Japan Shanghai Jiao Tong Univ Dept Comp Sci & Engn Shanghai Peoples R China

ISBN: (纸本)9781665414944

network function virtualization (NFV) enables network functions to run on general-purpose servers, thus alleviates the reliance on dedicated hardware and significantly improves the scalability and flexibility in networking service provisioning. Meanwhile, it is recognized that Virtualized network functions (VNFs) suffer from serious performance problem. Graphics Processing Unit (GPU), with massive processing cores, has been advocated as a potential accelerator for improving the performance efficiency of VNFs. However, the special architecture of GPU makes existing CPU-oriented task scheduling strategies fail to be applied, limiting the acceleration potential of GPUs. To this end, we propose a GPU-oriented spatio-temporal sharing framework as Gost to improve the performance of GPU-accelerated VNFs. We also study how to minimize the end-to-end latency of VNF flows via careful scheduling on the execution order and the GPU resource allocation (i.e., the number of threads). We first formally describe the problem as a non-linear integer programming problem, which is then equivalently transformed into an integer linear programming (ILP) form. Considering the high computation complexity of solving ILP, we further propose a customized list scheduling based spatio-temporal GPU sharing strategy (LSSTG). We have practically implemented a prototype of Gost, based on which we also verify the high efficiency of LSSTG by extensive experiments.

关键词： network function virtualization GPU Acceleration Spatio-Temporal Sharing Task Scheduling

来源：评论

学校读者我要写书评

暂无评论

AI-based Resource Prediction in network function virtualization Architectures 12

AI-based Resource Prediction in Network Function Virtualizat...

引用

12th International Conference on ICT Convergence (ICTC) - Beyond the Pandemic Era with ICT Convergence Innovation

作者： Eramo, Vincenzo Valente, Francesco Lavacca, Francesco G. Catena, Tiziana Sapienza Univ Roma DIET Rome Italy Fdn Ugo Bordoni Rome Italy

ISBN: (纸本)9781665423830

The high reconfiguration time of virtualised networks led to the definition of allocation procedures based on the prediction of the processing resources required. We propose an Artificial Intelligence-based resource allocation procedure in which the use of processing resources is monitored and the resources to be allocated are accordingly predicted. We evaluate the impact on the costs of the proposed allocation procedure and show that the cost increase is limited with respect to the case of exact knowledge of the needed processing resources.

关键词： network function virtualization Long Short Term Memory Neural network Resource Allocation

来源：评论

学校读者我要写书评

暂无评论

Latency-aware VNF Protection for network function virtualization in Elastic Optical networks

Latency-aware VNF Protection for Network Function Virtualiza...

引用

IEEE Global Communications Conference (GLOBECOM)

作者： Peng, Chengzong Zheng, Danyang Cao, Xiaojun Georgia State Univ Dept Comp Sci Atlanta GA 30303 USA Soochow Univ Sch Elect & Informat Engn Suzhou Peoples R China

ISBN: (纸本)9781728181042

In network function virtualization (NFV), the customer may request a set of virtual network functions (VNFs) that the customer traffic will go through. To accommodate such requests, the service providers have to embed the requested VNFs onto the substrate network (SN) to form an actual traffic forwarding path called service function path (SFP). In the elastic optical network (EON), how to protect the running network services against VNF failures becomes an attractive research focus. Most existing work concentrates on the protection or restoration of the physical node or fiber link failures in the SN. Few research attention has been paid to the failure of the virtual machines running a VNF. In this paper, we study how to protect VNFs when a VNF failure occurs in an EON. We define a new VNF failure protection cover (VFPC) problem and mathematically formulate VFPC. We propose a protection cover list based VNF protection (PCL-VP) algorithm against any single VNF failure while satisfying the latency requirement. Extensive simulations and analysis show the effectiveness of the proposed algorithm.

关键词： network function virtualization Virtual network function VNF failure Approximation algorithm

来源：评论

学校读者我要写书评

暂无评论

Decentralized Certificate Management for network function virtualization (NFV) Implementation in 5G networks 14th

Decentralized Certificate Management for Network Function Vi...

引用

14th EAI International Conference on Mobile Multimedia Communications, Mobimedia 2021

作者： Yan, Junzhi Yang, Bo Su, Li He, Shen Dong, Ning China Mobile Research Institute Beijing China

ISBN: (纸本)9783030898137

The certificate cost and certificate management complexity increase when PKI is leveraged into network function virtualization (NFV), a significant enabling technology for 5G networks. The expected security of PKI cannot be met because the certificate revocation inquiry is unavailable during the intranet implementation in the operator’s core network. This paper analyses the issues and challenges during the NFV implementation, and proposes a blockchain based decentralized NFV certificate management mechanism. During instantiation, the Virtual network functions (VNF) instance generates certificates according to the certificate profile provided in the VNF package. The certificates submitted to the decentralized certificate management system by the instance will be validated by corresponding participants. The certificates will be recorded into the ledger after validation and consensus, and then it will be trusted by the participants. The performance analysis shows the transaction efficiency is non-critical, and the transaction delay of seconds is acceptable in this decentralized system. The delay of the certificate inquiry is critical, and it can be fulfilled by the decentralized deployment of inquiry nodes. © 2021, ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering.

关键词： network function virtualization

来源：评论

学校读者我要写书评

暂无评论

Distributed LSTM-based cloud resource allocation in network function virtualization Architectures

引用

COMPUTER networkS 2022年 213卷 1页

作者： Catena, Tiziana Eramo, Vincenzo Panella, Massimo Rosato, Antonello Univ Roma La Sapienza Dept Informat Engn Elect & Telecommunicat Via Eudossiana 18 I-00184 Rome Italy

The high reconfiguration time of cloud resources in network function virtualization environments has led to the proposal of prediction-based resource allocation algorithms, with extensive use of artificial intelligence techniques. The prediction of processing capacities performed jointly and centrally has proved to be very complex due to the high communication overhead required. For this reason, we propose a distributed prediction technique in which Long Short-Term Memory neural networks exchange only a few weights in order to drastically reduce the communication overhead compared to the centralized case. We propose and investigate three different distributed solutions and show how they allow for low prediction errors.

关键词： network function virtualization Long Short-Term Memory Neural network Resource allocation

来源：评论

学校读者我要写书评

暂无评论

network function virtualization-Aware Orchestrator for Service function Chaining Placement in the Cloud

引用

IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS 2019年第3期37卷 643-655页

作者： Hawilo, Hassan Jammal, Manar Shami, Abdallah Western Univ Dept Elect & Comp Engn London ON N6A 3K7 Canada

network function virtualization (NFV) has been introduced by network service providers to overcome various challenges that hinder them from satisfying the growing demand for networking services with higher return-on-investment. The association of NFV with the leading technologies of information technology virtualization and software defined networking is paving the way for flexible and dynamic orchestration of the VNFs, but still, various challenges need to be addressed. The VNFs instantiation and placement problems on data center's (DC) servers are key enablers to achieve the desired flexible and dynamic NFV applications. In this paper, we have addressed the VNF placement problem by providing a novel mixed integer linear programming (MILP) optimization model and a novel heuristic solution, Betweenness centrality Algorithm for Component Orchestration of NFV platform (BACON), for small- and large-scale DC networks. The proposed solution addresses the VNF placement while taking into consideration the carrier-grade nature of the NFV applications and at the same time, minimizing the intra-and end-to-end delays of the service function chain (SFC). Also, the proposed approach enhances the reliability and the quality of service (QoS) of the SFC by maximizing the count of the functional group members. To evaluate the performance of the proposed solution, this paper conducts a comparative analysis with an NFV-agnostic algorithm and a greedy-k-NFV approach, which is proposed in the literature work. Also, this paper defines the complexity and the order of magnitude of the MILP model and BACON. BACON outperforms the greedy algorithms especially the greedy-k-NFV solution and has a lower complexity, which is calculated as O((n(8)-n(2))/2). The simulation results show that finding an optimized VNF placement can achieve minimal SFCs delays and enhance the QoS accordingly.

关键词： network function virtualization network soft-warization cloud computing mobile computing service function chain high availability next generation network next generation mobile networks 5G mobile communication

来源：评论

学校读者我要写书评

暂无评论

Research on Deployment Method of Service function Chain based on network function virtualization in Distribution communication network

Research on Deployment Method of Service function Chain base...

引用

IEEE Information Technology, networking, Electronic and Automation Control Conference

作者： Bingsen Xia Cui Li Zhaozheng Zhou Jidong Liu Economic and Technological Research Institute of State Grid Fujian Electric Power Co. LTD College of Electrical and Electronic Engineering North China Electric Power University Beijing China

In this paper, a service function chain(SFC) deployment method based on network function virtualization(NFV) is disclosed. Based on the network function virtualization technology, this method abstracts and virtualizes devices in the distribution communication network to realize the separation of software and hardware, and abstracts power distribution service requests into service function chains, thus transforming the service request processing problem into the SFC deployment problem. Through simulation verification, the proposed method achieves the goal of minimizing the overall cost and effectively reducing the cost of processing service requests. In this case, the integer linear programming model (ILP) is solved by the computing resource and bandwidth resource balancing (CBRT) algorithm to obtain the optimal solution, and the planning is carried out according to the optimal solution, which reduces the deployment delay of SFC and improves the network reliability. It is helpful to solve the problems of equipment connection of different brands, unified network management, easy operation and maintenance, and create greater economic and social benefits.

关键词： Costs Service function chaining Computational modeling Maintenance engineering Software Hardware network function virtualization

来源：评论

学校读者我要写书评

暂无评论

A Low-Loss Strategy for network function virtualization Multicast Optimization 6th

A Low-Loss Strategy for Network Function Virtualization Mult...

引用

6th EAI International Conference on IoT as a Service, IoTaaS 2020

作者： Tian, Muxin School of Electronic and Information Engineering Beihang University Beijing China

ISBN: (纸本)9783030675134

In order to fulfill the multicast task with a service function chain (SFC) requirement and effectively utilize network bandwidth and resources, a low-cost NFV multicast optimization strategy based on Dijkstra’s algorithm is proposed for the real-time requirements of wireless network data transmission scenarios. Taking network resource consumption and link bandwidth consumption as evaluation indicators, on the premise of meeting the Service function Tree (SFT) delay requirements, the Virtual network function (VNF) is placed reasonably to realize the embedding of the Service function Chain (SFC). It creatively proposes the merge rule of VNF in the SFC chain, which reduces the consumption of node resources and link bandwidth while ensuring the connectivity of the network. Experimental results show that the algorithm can effectively reduce the consumption of node resources and link bandwidth under the condition of ensuring low delay, and ensure the real-time and reliability of data transmission. © 2021, ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering.

关键词： network function virtualization

来源：评论

学校读者我要写书评

暂无评论

Review on network function virtualization in Information-Centric networking

Review on Network Function Virtualization in Information-Cen...

引用

2021 International Conference of Technology, Science and Administration, ICTSA 2021

作者： Fazea, Yousef Mohammed, Fathey Madi, Mohammed Alkahtani, Ammar Ahmed University Utara Malaysia School of Computing Sintok Kedah06010 Malaysia Hasan Kalyoncu University Computer Engineering Department Turkey University Tenaga Nasional Institute of Sustainable Energy Kajang Selangor43000 Malaysia

ISBN: (纸本)9781665428620

network function virtualization (NFV / VNF) and information-centric networking (ICN) are two trending technologies that have attracted expert's attention. NFV is a technique in which network functions (NF) are decoupling from commodity hardware to run on to create virtual communication services. The virtualized class nodes can bring several advantages such as reduce Operating Expenses (OPEX) and Capital Expenses (CAPEX). On the other hand, ICN is a technique that breaks the host-centric paradigm and shifts the focus to 'named information' or content-centric. ICN provides highly efficient content retrieval network architecture where popular contents are cached to minimize duplicate transmissions and allow mobile users to access popular contents from caches of network gateways. This paper investigates the implementation of NFV in ICN. Besides, reviewing and discussing the weaknesses and strengths of each architecture in a critical analysis manner of both network architectures. Eventually, highlighted the current issues and future challenges of both architectures. © 2021 IEEE.

关键词： network function virtualization

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：