检索结果-内蒙古大学图书馆

A scalable anomaly detection and mitigation architecture for legacy networks via an OpenFlow middlebox

SECURITY AND COMMUNICATION networkS 2016年第13期9卷 1958-1970页

作者： Giotis, Kostas Androulidakis, George Maglaris, Vasilis Natl Tech Univ Athens Sch Elect & Comp Engn Network Management & Optimal Design Lab NETMODE Athens Greece

In this paper, we investigate the applicability of inserting an OpenFlow middlebox to enhance the remotely triggered black hole routing mechanism, to mitigate distributed denial of service (DDoS) attacks in legacy networks. Specifically, we propose a modular architecture that exploits the network programmability of software-defined networking within the context of network functions virtualization, deploying on-demand virtualized network functions (VNFs) capable to manipulate and filter malicious traffic. Leveraging on the OpenFlow control functionality, we match and handle traffic on a per-flow level, preserving connectivity to/from the victim while pushing the mitigation process upstream, towards the edge of the affected network. To that end, a multilevel anomaly detection and identification mechanism was developed, pinpointing the victim in case an attack is detected. Subsequently, a virtualized network function instructs the edge router to forward all traffic destined to the victim to an OpenFlow switch, acting as a middlebox capable to filter malicious traffic identified by an OpenFlow controller, while preserving benign flows. The proposed architecture was implemented and evaluated based on the combination of datasets containing traces of real DDoS attacks and normal background traffic from our university campus network. Our analysis illustrated a clear clustering of Internet protocol prefixes used by malicious sources;thus, we implemented a longest common prefix aggregation algorithm to enable scaling of the proposed mitigation process, overcoming constraints due to hardware limitations of OpenFlow devices. Our analysis verifies that the proposed modular and scalable schema can efficiently identify DDoS attack victims and filter malicious traffic, without exhausting system and network resources. Copyright (c) 2015 John Wiley & Sons, Ltd.

关键词： SDN OpenFlow network functions virtualization DDoS anomaly detection

来源：评论

学校读者我要写书评

暂无评论

Optimized Multi-Service Tasks Offloading for Federated Learning in Edge virtualization

引用

IEEE TRANSACTIONS ON network SCIENCE AND ENGINEERING 2022年第6期9卷 4363-4378页

作者： Tam, Prohim Math, Sa Kim, Seokhoon Soonchunhyang Univ Dept Software Convergence Asan 31538 South Korea Soonchunhyang Univ Dept Comp Software Engn Asan 31538 South Korea

Edge federated learning (EFL) utilizes edge computing (EC) to alleviate direct round communications of multi-dimensional model updates between local participants and the central parameter server. With an elastic edge-assisted aggregation procedure, the burden of backbone congestion can be handled for multi-service model communications. To provide an adaptive virtual resource orchestration, the integration of software-defined networking (SDN), network functions virtualization (NFV), EC, and double deep q-networks is emerged, which accurately gathers the state observation from local and edge nodes in data plane and NFV infrastructure (NFVI) for applying actions of allocated resource predetermination and recommended offloading policy. The reward formulation considers the minimization of completion time, energy consumption, and round communications between local participants and the selected NFV-enabled EC (NFVeEC) node until the global model is constructed with satisfying accuracy. In this paper, we proposed a decentralized SDN controller as an agent to enable a softwarization mechanism and interact with the virtualization-based EFL environment. The architecture adoption, agent controller, and orchestrator allow the centralized view for virtual network functions placement with efficient virtual machine mapping to perform edge update procedures and create the forwarding path effectively. The recommended NFVeEC for local-EFL updates is based on reward output and proposed agent valuation.

关键词： Computational modeling Reinforcement learning Adaptation models Data models network function virtualization Computer architecture Resource management Deep learning Federated learning Software defined networking Deep reinforcement learning edge intelligence federated learning network functions virtualization software-defined edge virtualization

来源：评论

学校读者我要写书评

暂无评论

Software-Defined Cloud Computing: A Systematic Review on Latest Trends and Developments

引用

IEEE ACCESS 2019年 7卷 93294-93314页

作者： Abbasi, Aaqif Afzaal Abbasi, Almas Shamshirband, Shahaboddin Chronopoulos, Anthony Theodore Persico, Valerio Pescape, Antonio Fdn Univ Dept Software Engn Islamabad 44000 Pakistan Int Islamic Univ Dept Comp Sci Islamabad 44000 Pakistan Ton Duc Thang Univ Dept Management Sci & Technol Dev Ho Chi Minh City Vietnam Ton Duc Thang Univ Fac Informat Technol Ho Chi Minh City Vietnam Univ Texas San Antonio Dept Comp Sci San Antonio TX 78249 USA Univ Patras Dept Comp Engn & Informat Rion 26500 Greece Univ Napoli Federico II Elect Engn & Informat Technol Dept I-80125 Naples Italy

Cloud computing concepts offer effective and efficient tools for addressing resource-hungry computational problems. While conventional methods, architectures, and processing techniques may limit cloud data center performance, software-defined cloud computing (SDCC) is an approach where virtualization services to all network resources in a dc are software-defined and where software-defined networking (SDN) and cloud computing go hand in hand. SDCC-related concepts change the previous state of affairs by promoting the centralized control of networking functions in a data center. A key objective of developing software-driven cloud infrastructure is that the networking hardware, software, storage, security, and network traffic management is open and interoperable. This facilitates easy installation and management of networking functions in the cloud infrastructure. Employing SDCC concepts to cloud data centers can improve resource administration challenges to a greater extent. This paper presents a survey on SDCC. We begin by introducing SDCC environments and explain its main architectural components. We identify the essential contributions of various developments to this field and discuss the implementation challenges and limitations faced in their adoption. We also explore the potential of SDCC in two domains, namely, resource orchestration and application development, as case studies of specific interest. In an attempt to anticipate the future evolution, we discuss the important research opportunities and challenges in this promising field.

关键词： Cloud computing data centers infrastructure management networking network functions virtualization scalability software defined networking

来源：评论

学校读者我要写书评

暂无评论

AI-Driven Provisioning in the 5G Core

引用

IEEE INTERNET COMPUTING 2021年第2期25卷 18-25页

作者： Sheoran, Amit Fahmy, Sonia Cao, Lianjie Sharma, Puneet Purdue Univ W Lafayette IN 47906 USA Hewlett Packard Labs Palo Alto CA 94304 USA

network slicing enables communication service providers to partition physical infrastructure into logically independent networks. network slices must be provisioned to meet the service-level objectives (SLOs) of disparate offerings, such as enhanced mobile broadband, ultrareliable low-latency communications, and massive machine-type communications. network orchestrators must customize service placement and scaling to achieve the SLO of each network slice. In this article, we discuss the challenges encountered by network orchestrators in allocating resources to disparate 5G network slices, and propose the use of artificial intelligence to make core placement and scaling decisions that meet the requirements of network slices deployed on shared infrastructure. We explore how artificial intelligence-driven scaling algorithms, coupled with functionality-aware placement, can enable providers to design closed-loop solutions to meet the disparate SLOs of future network slices.

关键词： 5G mobile communication Resource management Noise measurement Ultra reliable low latency communication Hardware Reliability Data centers Telecommunications 5G AI network functions virtualization

来源：评论

学校读者我要写书评

暂无评论

A Survey on Data Plane Flexibility and Programmability in Software-Defined networking

引用

IEEE ACCESS 2019年 7卷 47804-47840页

作者： Kaljic, Enio Maric, Almir Njemcevic, Pamela Hadzialic, Mesud Univ Sarajevo Fac Elect Engn Dept Telecommun Sarajevo 71000 Bosnia & Herceg

Software-defined networking (SDN) has attracted the attention of the research community in recent years, as evidenced by a large number of survey and review papers. The architecture of SDN clearly recognizes three planes: application, control, and data planes. The application plane executes network applications, the control plane regulates the rules for the entire network based on the requests generated by network applications, and based on the set rules, the controller configures the switches in the data plane. The role of the switch in the data plane is to simply forward packets based on the instructions given by the controller. By analyzing the SDN-related research papers, it is observed that research, from the very beginning, is insufficiently focused on the data plane. Therefore, this paper gives a comprehensive overview of the data plane survey with a particular emphasis on the problem of programmability and flexibility. The first part of the survey is dedicated to the evaluation of actual data plane architectures through several definitions and aspects of data plane flexibility and programmability. Then, an overview of the SDN-related research was presented with the aim of identifying the key factors influencing the gradual deviation from the original data plane architectures given with ForCES and OpenFlow specifications. In this paper, we used the term data plane evolution for this deviation. By establishing a correlation between the treated problem and the problem-solving approaches, the limitations of ForCES and OpenFlow data plane architectures were identified. Based on the identified limitations, a generalization of approaches to addressing the problem of data plane flexibility and programmability has been made. By examining the generalized approaches, open issues have been identified, establishing the grounds for future research directions proposal.

关键词： Data plane data plane abstractions data plane architectures data plane flexibility data plane implementations data plane languages data plane programmability deeply programmable networks description languages energy consumption energy efficiency hardware-based implementations measurement monitoring network virtualization network functions virtualization networking technologies performance programming languages quality of service reliability security software-based implementations software-defined networking stateful data plane

来源：评论

学校读者我要写书评

暂无评论

A Survey on Replica Server Placement Algorithms for Content Delivery networks

引用

IEEE COMMUNICATIONS SURVEYS AND TUTORIALS 2017年第2期19卷 1002-1026页

作者： Sahoo, Jagruti Salahuddin, Mohammad A. Glitho, Roch Elbiaze, Halima Ajib, Wessam South Carolina State Univ Dept Math & Comp Sci Orangeburg SC 29117 USA Univ Quebec Dept Comp Sci Montreal PQ H2X 3Y7 Canada Concordia Univ Montreal PQ Canada Univ Western Cape ZA-7535 Bellville South Africa

Content delivery networks (CDNs) have gained immense popularity over the years. Replica server placement is a key design issue in CDNs. It entails placing replica servers at meticulous locations, such that cost is minimized and quality of service of end-users is satisfied. Many replica server placement models have been proposed in the literature of traditional CDN. As the CDN architecture is evolving through the adoption of emerging paradigms, such as, cloud computing and network functions virtualization, new algorithms are being proposed. In this paper, we present a comprehensive survey of replica server placement algorithms in traditional and emerging paradigm-based CDNs. We categorize the algorithms and provide a summary of their characteristics. Besides, we identify requirements for an efficient replica server placement algorithm and perform a comparison in the light of the requirements. Finally, we discuss potential avenues for further research in replica server placement in CDNs.

关键词： Cloud computing content delivery networks network functions virtualization replica server placement

来源：评论

学校读者我要写书评

暂无评论

Secure NFV Orchestration Over an SDN-Controlled Optical network With Time-Shared Quantum Key Distribution Resources

引用

JOURNAL OF LIGHTWAVE TECHNOLOGY 2017年第8期35卷 1357-1362页

作者： Aguado, Alejandro Hugues-Salas, Emilio Haigh, Paul Anthony Marhuenda, Jaume Price, Alasdair B. Sibson, Philip Kennard, Jake E. Erven, Chris Rarity, John G. Thompson, Mark Gerard Lord, Andrew Nejabati, Reza Simeonidou, Dimitra Univ Bristol Fac Engn High Performance Networks Grp Bristol BS8 1UB Avon England UPM Ctr Computat Simulat Campus Montegancedo Madrid 28660 Spain Univ Bristol Dept Elect & Elect Engn High Performance Networks Grp Bristol BS8 1TH Avon England UCL Commun & Informat Syst Grp London WC1E 6BT England Univ Bristol Ctr Quantum Photon Sch Phys Bristol BS8 1TH Avon England Univ Bristol Quantum Engn Ctr Doctoral Training Bristol BS8 1TH Avon England BTDesign Polaris House Ipswich IP5 3RE Suffolk England

Quantum key distribution (QKD) is a state-of-theart method of generating cryptographic keys by exchanging single photons. Measurements on the photons are constrained by the laws of quantum mechanics, and it is fromthis that the keys derive their security. Current public key encryption relies on mathematical problems that cannot be solved efficiently using present-day technologies;however, it is vulnerable to computational advances. In contrast QKD generates truly random keys secured against computational advances and more general attacks when implemented properly. On the other hand, networks are moving towards a process of softwarizationwith the main objective to reduce cost in both, the deployment and in the network maintenance. This process replaces traditional network functionalities (or even full network instances) typically performed in network devices to be located as software distributed across commodity data centers. Within this context, network function virtualization (NFV) is a new concept in which operations of current proprietary hardware appliances are

关键词： network functions virtualization quantum key distribution software defined networking

来源：评论

学校读者我要写书评

暂无评论

An Edge-to-Cloud Virtualized Multimedia Service Platform for 5G networks

引用

IEEE TRANSACTIONS ON BROADCASTING 2019年第2期65卷 369-380页

作者： Alvarez, Federico Breitgand, David Griffin, David Andriani, Pasquale Rizou, Stamatia Zioulis, Nikolaos Moscatelli, Francesca Serrano, Javier Keltsch, Madeleine Trakadas, Panagiotis Phan, T. Khoa Weit, Avi Acar, Ugur Prieto, Oscar Iadanza, Francesco Carrozzo, Gino Koumaras, Harilaos Zarpalas, Dimitrios Jimenez, David Univ Politecn Madrid GATV Res Grp E-28040 Madrid Spain IBM Haifa Res Labs Comp Serv IL-3498825 Haifa Israel UCL Dept Elect & Elect Engn Inst Commun & Connected Syst London WC1E 7JE England Engn Ingn Informat SpA Res & Dev Lab I-00144 Rome Italy Singular Log European Projects Dept Athens 14564 Greece Ctr Res & Technol Hellas Inst Informat Technol Thessaloniki 57001 Greece Univ Politecn Madrid Signals Syst & Radiocommun Dept E-28040 Madrid Spain NextWorks I-56122 Pisa Italy Inst Rundfunktech Dept Res & Dev D-80939 Munich Germany Technol & Educ Inst Sterea Ellada Dept Elect Engn Psachna 34100 Greece NETAS Multimedia Res & Dev Dept TR-34912 Istanbul Turkey Radio Televis Espanola Network Dept Madrid 28007 Spain NCSR Demokritos Inst Informat & Telecommun Athens 15310 Greece

The focus of research into 5G networks to date has been largely on the required advances in network architectures, technologies, and infrastructures. Less effort has been put on the applications and services that will make use of and exploit the flexibility of 5G networks built upon the concept of software-defined networking (SDN) and network function virtualization (NFV). Media-based applications are amongst the most demanding services, requiring large bandwidths for high audio-visual quality, low-latency for interactivity, and sufficient infrastructure resources to deliver the computational power for running the media applications in the networked cloud. This paper presents a novel service virtualization platform (SVP), called 5G-MEDIA SVP, which leverages the principles of NFV and SDN to facilitate the development, deployment, and operation of media services on 5G networks. The platform offers an advanced cognitive management environment for the provisioning of network services (NSs) and media-related applications, which directly link their lifecycle management with user experience as well as optimization of infrastructure resource utilization. Another innovation of 5G-MEDIA SVP is the integration of serverless computing with media intensive applications in 5G networks, increasing cost effectiveness of operation and simplifying development and deployment time. The proposed SVP is being validated against three media use cases: 1) immersive virtual reality 3-D gaming application;2) remote production of broadcast content incorporating user generated contents;and 3) dynamically adaptive content distribution networks for the intelligent distribution of ultrahigh definition content. The preliminary results of the 5G-MEDIA SVP platform evaluation are compared against current practice and show that the proposed platform provides enhanced functionality for the operators and infrastructure owners, while ensuring better NS performance to service providers and end users.

关键词： 5G networks network functions virtualization serverless computing immersive media remote production content delivery networks

来源：评论

学校读者我要写书评

暂无评论

Energy-delay tradeoff for virtual machine placement in virtualized multi-access edge computing: a two-sided matching approach

引用

JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING 2021年第6期14卷 6603-6621页

作者： Zhang, Long Zhuge, Shanshan Wang, Yao Xu, Haitao Sun, Enchang Hebei Univ Engn Sch Informat & Elect Engn Handan 056038 Peoples R China Univ Sci & Technol Beijing Sch Comp & Commun Engn Beijing 100083 Peoples R China Beijing Univ Technol Beijing Adv Innovat Ctr Future Internet Technol Beijing 100124 Peoples R China Beijing Univ Technol Fac Informat Technol Beijing 100124 Peoples R China

By decoupling network functions from the underlying physical machines (PMs) at the edge of the networks, the virtualized multi-access edge computing (MEC) enables deployment of new network services and elastic network scaling to reduce the maintenance costs in a more flexible, scalable and cost-effective manner. Although there are appealing performance gains to be achieved, the placement of virtual machines (VMs) on top of the sharing PMs to support computation-intensive applications for smart mobile devices becomes a major challenge, especially for an increasing network scale. In this paper, we attempt to deal with the VM placement problem in virtualized MEC system, which is targeted for finding a performance balance between energy consumption and computing/offloading delay. To capture such a tradeoff for VM placement, we formulate a weighted sum based cost minimization problem as a pure 0-1 integer linear programming problem, which is NP-complete and very difficult to solve with lower complexity. Based on the one-to-one mapping relation constraint, the VM placement problem is then converted into a many-to-many two-sided matching problem between the VM instances and the PMs. Motivated by the student project allocation problem, we develop an extended two-sided matching algorithm with lower computational complexity for solving the matching problem. Simulation results are presented to show the effectiveness of our proposed algorithm, and the normalization factor is of great significance to obtain the lower total cost.

关键词： Multi-access edge computing network functions virtualization Virtual machine placement Physical machine Energy-delay tradeoff Matching theory

来源：评论

学校读者我要写书评

暂无评论

Cost and Availability Aware Resource Allocation and Virtual Function Placement for CDNaaS Provision

引用

IEEE TRANSACTIONS ON network AND SERVICE MANAGEMENT 2018年第4期15卷 1334-1348页

作者： Yala, Louiza Frangoudis, Pantelis A. Lucarelli, Giorgio Ksentini, Adlen Univ Rennes 1 IRISA F-35042 Rennes France EURECOM Commun Syst Dept F-06904 Sophia Antipolis France Univ Grenoble Alpes CNRS INRIA LIG F-38000 Grenoble France Univ Lorraine LCOMS F-57000 Metz France

We address the fundamental tradeoff between deployment cost and service availability in the context of on-demand content delivery service provision over a telecom operator's network functions virtualization infrastructure. In particular, given a specific set of preferences and constraints with respect to deployment cost, availability and computing resource capacity, we provide polynomial-time heuristics for the problem of jointly deriving an appropriate assignment of computing resources to a set of virtual instances and the placement of the latter in a subset of the available physical hosts. We capture the conflicting criteria of service availability and deployment cost by proposing a multi-objective optimization problem formulation. Our algorithms are experimentally shown to outperform state-of-the-art solutions in terms of both execution time and optimality, while providing the system operator with the necessary flexibility to balance between conflicting objectives and reflect the relevant preferences of the customer in the produced solutions.

关键词： Content delivery networks cloud computing network functions virtualization resource allocation service availability VNF placement

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：