基于隔离等级的网络切片部署方法

潘启润; 黄开枝; 游伟

doi:10.11959/j.issn.2096-109x.2020003

您当前的位置：

首页 >

文章列表页 >

基于隔离等级的网络切片部署方法

学术论文 | 更新时间：2024-06-03

- 基于隔离等级的网络切片部署方法
- Network slicing deployment method based on isolation level
- 网络与信息安全学报 2020年6卷第2期页码：96-105
- 作者机构：
- 作者简介：
  
  [ "潘启润（1993- ），女，河北石家庄人，战略支援部队信息工程大学硕士生，主要研究方向为新一代移动通信技术、网络切片" ]
  [ "黄开枝（1973- ），女，安徽滁州人，战略支援部队信息工程大学教授、博士生导师，主要研究方向为移动通信、无线物理层安全" ]
  [ "游伟（1984- ），男，江西丰城人，战略支援部队信息工程大学讲师，主要研究方向为密码学、5G网络安全" ]
- 基金信息：
  
  国家重点研发计划基金资助项目;The National Key R＆D Program of China(2016YFB0801605);国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003);国家自然科学基金创新研究群体资助项目;The National Natural Science Foundation for Creative Research Groups of China(61801515)
- DOI：10.11959/j.issn.2096-109x.2020003
  中图分类号： TP393
- 网络首发：2020-04，
  
  纸质出版：2020-04-15
- 稿件说明：
移动端阅览
潘启润, 黄开枝, 游伟. 基于隔离等级的网络切片部署方法[J]. 网络与信息安全学报, 2020,6(2):96-105.

Qirun PAN, Kaizhi HUANG, Wei YOU. Network slicing deployment method based on isolation level[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 96-105.
潘启润, 黄开枝, 游伟. 基于隔离等级的网络切片部署方法[J]. 网络与信息安全学报, 2020,6(2):96-105. DOI： 10.11959/j.issn.2096-109x.2020003.

Qirun PAN, Kaizhi HUANG, Wei YOU. Network slicing deployment method based on isolation level[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 96-105. DOI： 10.11959/j.issn.2096-109x.2020003.

摘要

为了兼顾网络切片的性能隔离需求和安全隔离需求，提出了一种基于隔离等级的网络切片部署方法。该方法首先从性能隔离和安全隔离两方面确定了网络切片实例的隔离等级，在选择合适的位置部署虚拟节点时，不但保证所有网络切片实例均能达到各自的性能水平和安全水平，而且从隔离等级差值入手对虚拟节点共存的条件进行限制；然后利用整数线性规划方法对该问题进行建模，把部署成本最小化作为目标函数；最后使用基于遗传算法改进的粒子群算法求出最终的部署结果。仿真结果表明，该方法具有较低的部署成本和较高的收益开销比，并且能够同时保证性能和安全两方面的需求。

Abstract

In order to balance the performance isolation requirements and security isolation requirements of network slicing

a network slice deployment method based on isolation level was proposed.The method first determined the isolation level of the network slice instance from the aspects of performance isolation and security isolation.When deploying the virtual nodes in the appropriate location

not only ensured that all network slice instances could reach their respective performance levels and security levels

but also isolated them.The gradation difference started to limit the coexistence condition of the virtual node.Then the integer linear programming method was used to model the problem

and the deployment cost was minimized as the objective function.Finally

the particle swarm optimization algorithm based on genetic algorithm was used to find the final deployment result.The simulation results show that the method has lower deployment cost and higher benefit-to-cost ratio

and can guarantee both performance and security.

关键词

Keywords

references

FOUKAS X , PATOUNA S G ， ELMOKASHFIA , et al . Network slicing in 5G:survey and challenges [J ] . IEEE Communications Magazine , 2017 , 55 ( 5 ): 94 - 100 .

ZHU Q , ZHU J D , AGRAWALG . Power-aware consolidation of scientific workflows in virtualized environments [C ] // High Performance Computing,Networking,Storage ＆ Analysis . 2010 : 1 - 12 .

XU F , LIU F M , LIU L H , et al . iAware:making live migration of virtual machines interference-aware in the cloud [J ] . IEEE Transactions on Computers , 2014 , 63 ( 12 ): 3012 - 3025 .

ALANR , AMANK , SRIRAMG , ， et al . PACMan:performance aware virtual machine consolidation [C ] // The 10th International Conference on Autonomic Computing . 2013 : 83 - 94 .

ROOZBEHM , ALBERTY Z , . Managing performance degradation of collocated virtual machines in private cloud [C ] // The 18th International Conference on High Performance Computing and Communications . 2016 : 128 - 135 .

GULMEZOGLUB , MEHMETS i , IRAZOQUIG , et al . Cross-VM cache attacks on AES [J ] . IEEE Transactions on Multi-Scale Computing Systems , 2017 , 2 ( 3 ): 211 - 222 .

HAN Y , CHAN J , ALPCAN T , et al . Using virtual machine allocation policies to defend against co-resident attacks in cloud computing [J ] . IEEE Transactions on Dependable and Secure Computing , 2017 , 14 ( 1 ): 95 - 108 .

AHMED H A , GEORGE A , MINA G , et al . It's time to migrate! A game-theoretic framework for protecting a multi-tenant cloud against collocation attacks [C ] // IEEE International Conference on Cloud Computing . 2018 : 725 - 731 .

YU S , GUI X , LIN J , et al . A security-awareness virtual machine management scheme based on Chinese wall policy in cloud computing [J ] . The Scientific World Journal , 2014 ( 5 ): 805 - 923 .

LIANG X , GUI X L , JIANA N , et al . Mitigating cloud co-resident attacks via grouping-based virtual machine placement strategy [C ] // IEEE International Performance Computing and Communications Conference . 2017 : 1 - 8 .

SAMAM R , AN X L , WEI Q , et al . Reshaping the mobile core network via function decomposition and network slicing for the 5G era [C ] // IEEE Wireless Communications and Networking Conference Workshops . 2016 : 90 - 96 .

SAMEERKUMARS , RAYMONDM , ANDREAF . A cloud-native approach to 5G network slicing [J ] . IEEE Journals ＆ Magazines , 2017 , 55 ( 8 ): 120 - 127 .

TOMASL , LAKEWE B , ELMROTHE , . Service level and performance aware dynamic resource allocation in overbooked data centers [C ] // IEEE/ACM International Symposium on Cluster . 2016 .

梁鑫 , 桂小林 , 戴慧珺 , 等 . 云环境中跨虚拟机的 Cache 侧信道攻击技术研究 [J ] . 计算机学报 , 2017 , 40 ( 2 ): 317 - 336 .

LIANG X , GUI X L , DAI H J , et al . Research on Cache side channel attack technology of virtual machines in cloud environment [J ] . Chinese Journal of Computers , 2017 , 40 ( 2 ): 317 - 336 .

潘勇 , 郭晓东 . 一种基于遗传算法改进的粒子群优化算法 [J ] . 计算机应用与软件 , 2011 , 28 ( 9 ): 222 - 224 .

PAN Y , GUO X D . An improved particle swarm optimization algorithm based on genetic algorithm [J ] . Computer Applications and Software , 2011 , 28 ( 9 ): 222 - 224 .

赵硕 , 季新生 , 毛宇星 , 等 . 基于安全等级的虚拟机动态迁移方法 [J ] . 通信学报 , 2017 , 38 ( 7 ): 165 - 174 .

ZHAO S , JI X S , MAO Y X , et al . Research on dynamic migration of virtual machine based on security level [J ] . Journal on Communications , 2017 , 38 ( 7 ): 165 - 174 .

浏览量

429

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

智能化的安卓手势密码取证关键技术

面向5G mMTC的网络切片安全研究

网络加密流量侧信道攻击研究综述

RSA-CRT密码防御算法的故障注入攻击

基于粒子群优化算法的5G网络切片功能迁移机制