A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration

Xiaohui YAO; Qing LI; Kunkun SUN

doi:10.11959/j.issn.1000-0801.2020144

您当前的位置：

首页 >

文章列表页 >

A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration

Topic: Intelligent and Highly Confrontational Development of Network Security | 更新时间：2024-06-05

- A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration
- Telecommunications Science Vol. 36, Issue 5, Pages: 16-24(2020)
- 作者机构：
  
  1. 移动互联网系统与应用安全国家工程实验室，上海 201315
  2. 中国电信股份有限公司研究院，上海 200122
  3. 中国科学院信息工程研究所，北京 100093
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2020144
  CLC： TP393
- Published Online：2020-05，
  
  Published：20 May 2020
- 稿件说明：
移动端阅览
Xiaohui YAO, Qing LI, Kunkun SUN. A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration[J]. Telecommunications science, 2020, 36(5): 16-24.
DOI：

Xiaohui YAO, Qing LI, Kunkun SUN. A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration[J]. Telecommunications science, 2020, 36(5): 16-24. DOI： 10.11959/j.issn.1000-0801.2020144.

摘要

面对不断变化的网络需求，用户对传统网络的要求也越来越高，灵活性、扩展性、易用性等特征已成为现代网络的必备要素。提出了一种域适配混合遗传算法（domain adaptive hybrid genetic algorithm， DAHGA），可应用于云数据中心租户的安全服务链编排，实现租户云安全服务与策略的自动加载与激活，满足租户云安全“按需定制”需求。同时针对云安全服务链编排上各种提升VNF放置效率的算法进行了实验对比研究，充分验证了本文算法的有效性，为云业务无损安全服务链编排技术的实现提供了借鉴和参考。

Abstract

Faced with changeful network demands

users have increasingly higher requirements for traditional network.Features such as flexibility

scalability and ease of use have become essential elements of modern network.A domain adaptive hybrid genetic algorithm (DAHGA) was proposed

which could be applied to the security service chain arrangement of cloud data center tenants

to achieve automatic loading and activation of tenant cloud security services and policies

to meet tenant cloud security “customization on demand” requirements.And conducts experimental comparison research on the effective placement efficiency of each VNF on the cloud security service chain orchestration was carried out

which fully validated the proposed algorithm.Effectiveness provides a reference and reference for the realization of cloud business non-destructive security service chain orchestration technology.

关键词

Keywords

references

荆继武 , 云晓春 , 杨义先 , 等 . “网络空间安全重点专项”2017年度项目申报指南 [J ] . 2017 .

JING J W , YUN X C , YANG Y X , et al . 2017 Project application guide for “Key projects of Cyberspace Security” [J ] . 2017 .

ETSI . ETSI group specification:network management and orchestration ［Z］． 2014 ．

汪来富 , 沈军 , 金华敏 . 电信级云计算平台安全策略研究 [J ] . 电信科学 , 2011 , 27 ( 10 ): 19 - 23 .

WANG L F , SHEN J , JIN H M . Research on security policies of carrier-class cloud computing platform [J ] . Telecommunications Science , 2011 , 27 ( 10 ): 19 - 23 .

李小玲 , 王怀民 , 丁博 , 等 . 虚拟网络映射问题研究及其进展 [J ] . 软件学报 , 2012 , 23 ( 11 ): 3009 - 3028 .

LI X L , WANG H M , DING B , et al . Research and development of virtual network mapping problem [J ] . Journal of Software , 2012 , 23 ( 11 ): 3009 - 3028 .

张晨 . 基于 OpenFlow 的服务链研究与设计 [D ] . 北京:北京邮电大学 , 2017 .

ZHANG C . Research and design of service chain based on OpenFlow [D ] . Beijing:Beijing University of Posts and Telecommunications , 2017 .

邵维专 , 吕光宏 . 网络功能虚拟化资源配置及优化研究综述 [J ] . 计算机应用研究 , 2018 ( 2 ): 321 - 326 .

SHAO W Z , LV G H . Survey on NFV resource allocation and optimization [J ] . Application Research of Computers , 2018 ( 2 ): 321 - 326 .

DILLON T , WU C , CHANG E . Cloud computing:issues and challenges [C ] // Proceedings of 2010 24th IEEE International Conference on Advanced Information Networking and Applications . Piscataway:IEEE Press , 2010 .

HALPERN J , PIGNATARO C . Service function chaining (SFC) architecture:RFC 7665 [S ] . 2015 .

LAGHRISSI A , TALEB T . A survey on the placement of virtual resources and virtual network functions [J ] . IEEE Communications Surveys ＆ Tutorials , 2018 ( 3 ):1

BECK M T , BOTERO J F . Scalable and coordinated allocation of service function chains [J ] . Computer Communications , 2017 , 102 : 78 - 88 .

LUIZELLI M C , BAYS L R , BURIOL L S , et al . Piecing together the nfv provisioning puzzle:efficient placement and chaining of virtual network functions [C ] // Proceedings of IFIP/IEEE International Symposium on Integrated Network Management . Piscataway:IEEE Press , 2015 .

FAN J , GUAN C , ZHAO Y , et al . Availability-aware mapping of service function chains [C ] // Proceedings of IEEE INFOCOM 2017 - IEEE Conference on Computer Communications . Piscataway:IEEE Press , 2017 .

ZHU A , . Algorithms for assigning substrate network resources to virtual network components [C ] // Proceedings of IEEE International Conference on Computer Communications . Piscataway:IEEE Press , 2007 .

WU G , TANG M , TIAN Y C , et al . Energy-efficient virtual machine placement in data centers by genetic algorithm [C ] // Proceedings of International Conference on Neural Information Processing . Heidelberg:Springer , 2012 : 315 - 323 .

Views

541

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

VNF lifecycle security management measures in NFV

Network function virtualization elastic technology

Research on control strategy of bidirectional DC-DC converter based on improved genetic algorithm

Task urgency-based resource allocation algorithm in industrial Internet of things

Research on POI quality prediction based on KPCA-GA-BP neural network

Related Author

Jian SU

Ziyu XIAO

Lu LIU

Zhibin GUO

LI Li

CHEN Can

LI Can

GAO Feifan

Related Institution

State Grid Information & Telecommunication Co., Ltd.

Advanced Network and Intelligent Connection Technology Key Laboratory of Chongqing Education Commission of China

Chongqing Key Laboratory of Ubiquitous Sensing and Networking

School of Communications and Information Engineering, Chongqing University of Posts and Telecommunications

Chongqing Branch of China Mobile Communications Group Design Institute Co., Ltd.

⁰