Cost-Efficient Mapping for Fault-Tolerant Virtual Networks

Jarray, Abdallah; Karmouch, Ahmed

doi:10.1109/tc.2013.2295612

Cited by 35 publications

(8 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sun et al [13] focus on reconfiguring an existing VN with dynamic resource demands. Jarray et al [14] propose two VN protection approaches against any single physical failure in the SN. Di et al [15] investigate the reliable VN embedding problem for obtaining efficient resource sharing.…”

Section: Related Workmentioning

confidence: 99%

“…By performing the VN embedding in a security-aware way, the risks suffered by the VNs can be minimized, and the additional mechanisms adopted to enhance the security of the VNs can be reduced, resulting in guaranteed security for the VNs and low security overheads. Unfortunately, existing VN embedding algorithms [6][7][8][9][10][11][12][13][14][15][16][17] largely ignore the widespread security risks, making their applicability in a realistic environment rather doubtful.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Virtual Network Embedding through Security Risk Awareness and Optimization

2016

KSII TIIS

View full text Add to dashboard Cite

Network virtualization promises to play a dominant role in shaping the future Internet by overcoming the Internet ossification problem. However, due to the injecting of additional virtualization layers into the network architecture, several new security risks are introduced by the network virtualization. Although traditional protection mechanisms can help in virtualized environment, they are not guaranteed to be successful and may incur high security overheads. By performing the virtual network (VN) embedding in a security-aware way, the risks exposed to both the virtual and substrate networks can be minimized, and the additional techniques adopted to enhance the security of the networks can be reduced. Unfortunately, existing embedding algorithms largely ignore the widespread security risks, making their applicability in a realistic environment rather doubtful. In this paper, we attempt to address the security risks by integrating the security factors into the VN embedding. We first abstract the security requirements and the protection mechanisms as numerical concept of security demands and security levels, and the corresponding security constraints are introduced into the VN embedding. Based on the abstraction, we develop three security-risky modes to model various levels of risky conditions in the virtualized environment, aiming at enabling a more flexible VN embedding. Then, we present a mixed integer linear programming formulation for the VN embedding problem in different security-risky modes. Moreover, we design three heuristic embedding algorithms to solve this problem, which are all based on the same proposed node-ranking approach to quantify the embedding potential of each substrate node and adopt the k-shortest path algorithm to map virtual links. Simulation results demonstrate the effectiveness and efficiency of our algorithms.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Virtual Network Embedding through Security Risk Awareness and Optimization

2016

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…But network virtualizations are not guaranteed to protect the networks from new anomaly users. 3 This paper addresses the identification of new intruders and protects the network from malicious users.…”

Section: Introductionmentioning

confidence: 99%

“…Sensitive information can be sent only to the virtual network group nodes rather than sending it to all the physical network nodes. But network virtualizations are not guaranteed to protect the networks from new anomaly users 3 . This paper addresses the identification of new intruders and protects the network from malicious users.…”

Section: Introductionmentioning

confidence: 99%

Secure access of resources in software‐defined networks using dynamic access control list

Ramprasath¹,

Seethalakshmi

2020

Int J Communication

View full text Add to dashboard Cite

SummarySoftware‐defined networking (SDN) creates a platform to dynamically configure the networks for on‐demand services. SDN can easily control the data plane and the control plane by implementing the decoupling concept. SDN controller will regulate the traffic flow and creates the new flow label based on the packet dump received from the OpenFlow virtual switches. SDN governs both data information and control information toward the destination based on flow label, but it does not contain security measure to restrict the malicious traffic. The malicious denial‐of‐service (DoS) attack traffic is generated inside the SDN environment; it leads to the service unavailability. This paper is mainly focused on the detection of DoS attacks and also mitigates the malicious traffic by dynamically configuring the firewall. The SDN with dynamic access control list properties is emulated by mininet, and the experimental results exemplify the service unavailable gap between acceptance and rejection ratio of the packets.

show abstract

“…These issues are commonly referred to as the Virtual Network Embedding (VNE) problem, which has been a major research topic in network virtualization [2]. In the VNE problem, researchers have proposed to improve the availability, survivability, and resiliency of VNs by minimizing the network disconnections and capacity loss due to physical link failures [3], [4] and by minimizing the sum of all working and backup resources of physical nodes and links [5]- [7]. Similar to VNEs, a number of proposals have been made on reliabilityaware resource allocation and redundancy provisioning in data center networks.…”

Section: Introductionmentioning

confidence: 99%

Virtual Network Allocation for Fault Tolerance Balanced with Physical Resources Consumption in a Multi-Tenant Data Center

Ogawa

Hasegawa

Murata

2015

IEICE Trans. Commun.

View full text Add to dashboard Cite

In a multi-tenant data center, nodes and links of tenants' virtual networks (VNs) share a single component of the physical substrate network (SN). The failure of a single SN component can thereby cause the simultaneous failures of multiple nodes and links in a single VN; this complex of failures must significantly disrupt the services offered on the VN. In the present paper, we clarify how the fault tolerance of each VN is affected by a single SN failure, especially from the perspective of VN allocation in the SN. We propose a VN allocation model for multi-tenant data centers and formulate a problem that deals with the bandwidth loss in a single VN due a single SN failure. We conduct numerical simulations (with the setting that has 1.7 × 10 8 bit/s bandwidth demand on each VN, (denoted by C i)). When each node in each VN is scattered and mapped to an individual physical server, each VN can have the minimum bandwidth loss (5.3 × 10 2 bit/s (3.0 × 10 −6 ×C i)) but the maximum required bandwidth between physical servers (1.0 × 10 9 bit/s (5.7 × C i)). The balance between the bandwidth loss and the required physical resources can be optimized by assigning every four nodes of each VN to an individual physical server, meaning that we minimize the bandwidth loss without over-provisioning of core switches.

show abstract

Cost-Efficient Mapping for Fault-Tolerant Virtual Networks

Cited by 35 publications

References 35 publications

Virtual Network Embedding through Security Risk Awareness and Optimization

Virtual Network Embedding through Security Risk Awareness and Optimization

Secure access of resources in software‐defined networks using dynamic access control list

Virtual Network Allocation for Fault Tolerance Balanced with Physical Resources Consumption in a Multi-Tenant Data Center

Contact Info

Product

Resources

About