Network slicing deployment method based on isolation level

Qirun PAN; Kaizhi HUANG; Wei YOU

doi:10.11959/j.issn.2096-109x.2020003

您当前的位置：

首页 >

文章列表页 >

Network slicing deployment method based on isolation level

Papers | 更新时间：2024-06-03

- Network slicing deployment method based on isolation level
- Chinese Journal of Network and Information Security Vol. 6, Issue 2, Pages: 96-105(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020003
  CLC： TP393
- Online First：2020-04，
  
  Published：15 April 2020
- 稿件说明：
移动端阅览
Qirun PAN, Kaizhi HUANG, Wei YOU. Network slicing deployment method based on isolation level[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 96-105.
DOI：

Qirun PAN, Kaizhi HUANG, Wei YOU. Network slicing deployment method based on isolation level[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 96-105. DOI： 10.11959/j.issn.2096-109x.2020003.

摘要

为了兼顾网络切片的性能隔离需求和安全隔离需求，提出了一种基于隔离等级的网络切片部署方法。该方法首先从性能隔离和安全隔离两方面确定了网络切片实例的隔离等级，在选择合适的位置部署虚拟节点时，不但保证所有网络切片实例均能达到各自的性能水平和安全水平，而且从隔离等级差值入手对虚拟节点共存的条件进行限制；然后利用整数线性规划方法对该问题进行建模，把部署成本最小化作为目标函数；最后使用基于遗传算法改进的粒子群算法求出最终的部署结果。仿真结果表明，该方法具有较低的部署成本和较高的收益开销比，并且能够同时保证性能和安全两方面的需求。

Abstract

In order to balance the performance isolation requirements and security isolation requirements of network slicing

a network slice deployment method based on isolation level was proposed.The method first determined the isolation level of the network slice instance from the aspects of performance isolation and security isolation.When deploying the virtual nodes in the appropriate location

not only ensured that all network slice instances could reach their respective performance levels and security levels

but also isolated them.The gradation difference started to limit the coexistence condition of the virtual node.Then the integer linear programming method was used to model the problem

and the deployment cost was minimized as the objective function.Finally

the particle swarm optimization algorithm based on genetic algorithm was used to find the final deployment result.The simulation results show that the method has lower deployment cost and higher benefit-to-cost ratio

and can guarantee both performance and security.

关键词

Keywords

references

FOUKAS X , PATOUNA S G ， ELMOKASHFIA , et al . Network slicing in 5G:survey and challenges [J ] . IEEE Communications Magazine , 2017 , 55 ( 5 ): 94 - 100 .

ZHU Q , ZHU J D , AGRAWALG . Power-aware consolidation of scientific workflows in virtualized environments [C ] // High Performance Computing,Networking,Storage ＆ Analysis . 2010 : 1 - 12 .

XU F , LIU F M , LIU L H , et al . iAware:making live migration of virtual machines interference-aware in the cloud [J ] . IEEE Transactions on Computers , 2014 , 63 ( 12 ): 3012 - 3025 .

ALANR , AMANK , SRIRAMG , ， et al . PACMan:performance aware virtual machine consolidation [C ] // The 10th International Conference on Autonomic Computing . 2013 : 83 - 94 .

ROOZBEHM , ALBERTY Z , . Managing performance degradation of collocated virtual machines in private cloud [C ] // The 18th International Conference on High Performance Computing and Communications . 2016 : 128 - 135 .

GULMEZOGLUB , MEHMETS i , IRAZOQUIG , et al . Cross-VM cache attacks on AES [J ] . IEEE Transactions on Multi-Scale Computing Systems , 2017 , 2 ( 3 ): 211 - 222 .

HAN Y , CHAN J , ALPCAN T , et al . Using virtual machine allocation policies to defend against co-resident attacks in cloud computing [J ] . IEEE Transactions on Dependable and Secure Computing , 2017 , 14 ( 1 ): 95 - 108 .

AHMED H A , GEORGE A , MINA G , et al . It's time to migrate! A game-theoretic framework for protecting a multi-tenant cloud against collocation attacks [C ] // IEEE International Conference on Cloud Computing . 2018 : 725 - 731 .

YU S , GUI X , LIN J , et al . A security-awareness virtual machine management scheme based on Chinese wall policy in cloud computing [J ] . The Scientific World Journal , 2014 ( 5 ): 805 - 923 .

LIANG X , GUI X L , JIANA N , et al . Mitigating cloud co-resident attacks via grouping-based virtual machine placement strategy [C ] // IEEE International Performance Computing and Communications Conference . 2017 : 1 - 8 .

SAMAM R , AN X L , WEI Q , et al . Reshaping the mobile core network via function decomposition and network slicing for the 5G era [C ] // IEEE Wireless Communications and Networking Conference Workshops . 2016 : 90 - 96 .

SAMEERKUMARS , RAYMONDM , ANDREAF . A cloud-native approach to 5G network slicing [J ] . IEEE Journals ＆ Magazines , 2017 , 55 ( 8 ): 120 - 127 .

TOMASL , LAKEWE B , ELMROTHE , . Service level and performance aware dynamic resource allocation in overbooked data centers [C ] // IEEE/ACM International Symposium on Cluster . 2016 .

梁鑫 , 桂小林 , 戴慧珺 , 等 . 云环境中跨虚拟机的 Cache 侧信道攻击技术研究 [J ] . 计算机学报 , 2017 , 40 ( 2 ): 317 - 336 .

LIANG X , GUI X L , DAI H J , et al . Research on Cache side channel attack technology of virtual machines in cloud environment [J ] . Chinese Journal of Computers , 2017 , 40 ( 2 ): 317 - 336 .

潘勇 , 郭晓东 . 一种基于遗传算法改进的粒子群优化算法 [J ] . 计算机应用与软件 , 2011 , 28 ( 9 ): 222 - 224 .

PAN Y , GUO X D . An improved particle swarm optimization algorithm based on genetic algorithm [J ] . Computer Applications and Software , 2011 , 28 ( 9 ): 222 - 224 .

赵硕 , 季新生 , 毛宇星 , 等 . 基于安全等级的虚拟机动态迁移方法 [J ] . 通信学报 , 2017 , 38 ( 7 ): 165 - 174 .

ZHAO S , JI X S , MAO Y X , et al . Research on dynamic migration of virtual machine based on security level [J ] . Journal on Communications , 2017 , 38 ( 7 ): 165 - 174 .

Views

429

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Intellectualized forensic technique for Android pattern locks

Research on network slicing security for 5G mMTC

Survey of side channel attack on encrypted network traffic

Fault-injection attack on countermeasure algorithms of RSA-CRT cryptosystem

5G network slicing function migration mechanism based on particle swarm optimization algorithm

Related Author

Yan LI

Yuming XIE

Yan ZHA

Yangde WANG

Weidong QIU

Jiahao QIU

Geng LI

Jianwei LIU

Related Institution

Key Laboratory of Forensic Science, Shanghai Forensic Service Platform, Ministry of Justice, Academy of Forensic Science

School of Cyber Science and Engineering, Shanghai Jiao Tong University

National Computer Network Emergency Response Technical Team/Coordination Center of China

School of Cyber Science and Technology, Beihang University

State Key Laboratory of Mathematical Engineering and Advanced Computing

⁰