基于安全分级的网络切片备份与重映射方法研究

孙志勇; 季新生; 游伟; 袁泉

doi:10.11959/j.issn.2096-109x.2018088

您当前的位置：

首页 >

文章列表页 >

基于安全分级的网络切片备份与重映射方法研究

论文 | 更新时间：2024-06-03

- 基于安全分级的网络切片备份与重映射方法研究
- Research on backup and remapping of network slice based on security classification
- 网络与信息安全学报 2018年4卷第11期页码：49-57
- 作者机构：
- 作者简介：
  
  [ "孙志勇（1994-），男，河南濮阳人，国家数字交换系统工程技术研究中心硕士生，主要研究方向为新一代移动通信网络技术、移动通信网络安全。" ]
  [ "季新生（1968-），男，江苏南通人，国家数字交换系统工程技术中心教授、博士生导师，主要研究方向为网络空间安全、拟态安全。" ]
  [ "游伟（1984-），男，江西丰城人，国家数字交换系统工程技术中心讲师，主要研究方向为新一代移动通信网络技术、移动通信网络安全。" ]
  [ "袁泉（1991-），男，山东青岛人，国家数字交换系统工程技术博士生，主要研究方向为新一代移动通信网络技术、网络功能虚拟化。" ]
- 基金信息：
  
  国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003);国家重点研发计划基金资助项目;The National Key R＆D Program of China(2016YFB0801605)
- DOI：10.11959/j.issn.2096-109x.2018088
  中图分类号： TN918.91
- 网络首发：2018-11，
  
  纸质出版：2018-11-15
- 稿件说明：
移动端阅览
孙志勇, 季新生, 游伟, 等. 基于安全分级的网络切片备份与重映射方法研究[J]. 网络与信息安全学报, 2018,4(11):49-57.

Zhiyong SUN, Xinsheng JI, Wei YOU, et al. Research on backup and remapping of network slice based on security classification[J]. Chinese Journal of Network and Information Security, 2018, 4(11): 49-57.
孙志勇, 季新生, 游伟, 等. 基于安全分级的网络切片备份与重映射方法研究[J]. 网络与信息安全学报, 2018,4(11):49-57. DOI： 10.11959/j.issn.2096-109x.2018088.

Zhiyong SUN, Xinsheng JI, Wei YOU, et al. Research on backup and remapping of network slice based on security classification[J]. Chinese Journal of Network and Information Security, 2018, 4(11): 49-57. DOI： 10.11959/j.issn.2096-109x.2018088.

摘要

在未来5G核心网虚拟化环境中通用的X86服务器使攻击者容易发掘漏洞，底层网络也更易感染和传播病毒，进而造成单个物理节点失效问题，严重影响网络切片的服务性能。首先在现有节点备份和重映射应对方案基础上，考虑节点间的安全约束关系对网络安全性能的影响，提出网络切片中虚拟节点与物理节点的安全参数评估模型，建立虚拟节点与物理节点之间的安全约束关系；然后基于安全参数评估模型选出备份虚拟节点并设计备份映射方法；最后在满足网络时延要求下设计节点重映射机制。实验结果表明，所提方法能够在满足网络切片的服务性能要求下，显著提升网络的入侵容忍能力。

Abstract

In the future virtual environment of 5G core network

the general X86 servers make the attackers exploit vulnerabilities more easily

the substrate network is infected with and spreads the virus more easily

and the problem of single physical node failed will affect the service performance of the network slice seriously.Based on the existing node backup and remapping solutions

considering the impact of security constraints among nodes on network security performance

a security parameter evaluation model of virtual nodes and physical nodes were proposed in the network slicing

and the security constraint relationship was established between the virtual nodes and the physical nodes.Then backup virtual nodes were selected based on the security parameters evaluation model

and backup mapping methods were designed.Finally

the node remapping mechanism was designed with satisfying the requirement of network delay.Experiments show that the proposed method can significantly improve network intrusion tolerance with satisfying the requirements of network slicing service performance.

关键词

Keywords

references

3GPP SA . 3rd generation partnership project service and system aspects [EB/OL ] . http://www.3gpp.org/specifications-groups/ http://www.3gpp.org/specifications-groups/ . 2017 .9

ORDONEZ-LUCENA J , AMEIGEIRAS P , LOPEZ D , et al . Network slicing for 5G with SDN/NFV:concepts,architectures,and challenges [J ] . IEEE Communications Magazine , 2017 , 55 ( 5 ): 80 - 87 .

CHOYI V K , ABDEL-HAMID A , SHAH Y , et al . Network slice selection,assignment and routing within 5G networks [C ] // Standards for Communications and NETWORKING . 2016 : 1 - 7 .

CHATRAS B , KWONG U S T , BIHANNIC N . NFV enabling network slicing for 5G [C ] // Innovations in Clouds,Internet and Networks . 2017 .

ORDONEZ-LUCENA J , AMEIGEIRAS P , LOPEZ D , et al . Network slicing for 5G with SDN/NFV:concepts,architectures,and challenges [J ] . IEEE Communications Magazine , 2017 , 55 ( 5 ): 80 - 87 .

HAN B , GOPALAKRISHNAN V , JI L , et al . Network function virtualization:challenges and opportunities for innovations [J ] . IEEE Communications Magazine , 2015 , 53 ( 2 ): 90 - 97 .

HERRERA J G , BOTERO J F . Resource allocation in NFV:a comprehensive survey [M ] . IEEE Press , 2016 , 13 ( 3 ): 518 - 532 .

BASTA A , KELLERER W , HOFFMANN M , et al . A virtual SDN-enabled LTE EPC architecture:a case study for S/P gateways functions [C ] // IEEE Future Networks and Services . 2013 : 1 - 7 .

SEXTON J , STORLIE C , NEIL J . Attack chain detection statistical analysis and data mining [J ] . The ASA Data Science Journal , 2015 , 8 ( 5-6 ): 353 - 363 .

龚水清 , 陈靖 , 黄聪会 , 等 . 信任感知的安全虚拟网络映射算法 [J ] . 通信学报 , 2015 , 36 ( 11 ): 180 - 189 .

GONG S Q , JING J , HUANG C H , et al . Trust-aware secure virtual network embedding algorithm [J ] . Journal on Communications , 2015 , 36 ( 11 ): 180 - 189 .

HERKER S , KHAN A , AN X . Survey on survivable virtual network embedding problem and solutions [C ] // International Conference on Networking and Services (ICNS) . 2013 : 99 - 104 .

RAHMAN M R , BOUTABA R . SVNE:survivable virtual network embedding algorithms for network virtualization [J ] . IEEE Transactions on Network ＆ Service Management , 2013 , 10 ( 2 ): 105 - 118 .

CHOWDHURY S R , AHMED R , KHAN M A , et al . Protecting virtual networks with drone [C ] // Network Operations and Management Symposium (NOMS),IEEE/IFIP . 2016 : 78 - 86 .

CHOWDHURY S R , AHMED R , KHAN M M A , et al . Dedicated protection for survivable virtual network embedding [J ] . IEEE Transactions on Network and Service Management , 2016 , 13 ( 4 ): 913 - 926 .

ZHANG Q , ZHANI M F , JABRI M , et al . Venice:reliable virtual data center embedding in clouds [C ] // INFOCOM,Proceedings IEEE . 2014 : 289 - 297 .

JARRAY A , KARMOUCH A . Cost-efficient mapping for fault-tolerant virtual networks [J ] . IEEE Transactions on Computers , 2015 , 64 ( 3 ): 668 - 681 .

SHAHRIAR N , AHMED R , KHAN A , et al . ReNoVatE:recovery from node failure in virtual network embedding [C ] . Network and Service Management (CNSM) . 2016 : 19 - 27 .

SHAHRIAR N , AHMED R , CHOWDHURY S , et al . Generalized recovery from node failure in virtual network embedding [J ] . IEEE Transactions on Network ＆ Service Management , 2017 ,( 99 ): 1 - 1 .

YU H , ANAND V , QIAO C , et al . Migration based protection for virtual infrastructure survivability for link failure [C ] // 2011 and the National Fiber Optic Engineers Conference on Optical Fiber Communication Conference and Exposition (OFC/NFOEC) . 2011 : 1 - 3 .

季新生 , 赵硕 , 艾健健 , 等 . 异构备份式的虚拟网映射方法研究 [J ] . 电子与信息学报 , 2018 , 40 ( 5 ): 1087 - 1093 .

JI X S , ZHAO S , AI J J , et al . Research on heterogeneous-backup virtual network embedding [J ] . JEIT , 2018 , 40 ( 5 ): 1087 - 1093 .

浏览量

722

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据