Intent-Based End-to-End Network Service Orchestration System for Multi-Platforms

Rafiq, Adeel; Mehmood, Asif; Khan, Talha Ahmed; Abbas, Khizar; Afaq, Muhammad; Song, Wang‐Cheol

doi:10.3390/su12072782

Cited by 43 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, it allows consequently to declare modifications within the network throughout the processes with no interference in the running system. This approach eradicates the need for prerequisite skills for Virtual Network Functions (VNF) and Network Service (NS) orchestration through inputting intentions of users [12]. IBN or IDN (Intent-Driven Networks) biggest feature is their capability to transform conventional business requisites into network configuration plans automatically.…”

Section: B Nfv (Network Function Virtualization)mentioning

confidence: 99%

Towards Crossfire Distributed Denial of Service Attack Protection Using Intent-Based Moving Target Defense Over Software-Defined Networking

Hyder

Fatima

2021

IEEE Access

View full text Add to dashboard Cite

Crossfire is an indirect target area link-flooding Distributed Denial of Service (DDoS) attack determined to affect the neighbors of the real target. Currently, Crossfire DDoS attacks are acquiring impetus because of their indistinguishability and undetectability. SDN (Software Defined Networking) is a progressing technique because of its adaptability and programmability. Moving Target Defense (MTD) is an arising security strategy to counter the attacks by progressively changing the attacked plane. IBN (Intent-based Networking) is another promising methodology for providing dynamic network management. IBN-based MTD can provide efficient MTD solutions because of the concentrated control and observing capacities of the intents when translated into rules inside the SDN control plane. In this paper, a framework for the security of Crossfire DDoS attacks is proposed by making use of Intent-based Traffic modifications through Open Networking Operating System (ONOS) Rest API and Domain Name System (DNS) port redirection. In this paper, we exploited Intent-based MTD to divert the traffic from the principal host to the virtual shadow hosts to counter this attack. Traffic redirection helps in masquerading the attacker headed for shadow host and consequently getting the erroneous path towards network and hence, Crossfire attack couldn't be executed as expected. The proposed technique is simulated using Mininet and ONOS SDN controller. The outcomes showed traffic is successfully redirected at a low computational expense, therefore, Crossfire DDoS is efficiently mitigated as promising results are found.

show abstract

Section: B Nfv (Network Function Virtualization)mentioning

confidence: 99%

Towards Crossfire Distributed Denial of Service Attack Protection Using Intent-Based Moving Target Defense Over Software-Defined Networking

Hyder

Fatima

2021

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Intent based networking is a practical concept used in specific reference scenarios. In [2] and [3], multi-platform 5G and IoT network infrastructures are studies with IBN solutions. In [4] distributed, multi-technology, and multi-stakeholder network infrastructures are taken as examples to drive the need for intelligent automation and orchestration.…”

Section: Related Workmentioning

confidence: 99%

Benchmarking Various ML Solutions in Complex Intent-Based Network Management Systems

Bensalem¹,

Dizdarević²,

Jukan³

2021

Preprint

View full text Add to dashboard Cite

Intent-based networking (IBN) solutions to managing complex ICT systems have become one of the key enablers of intelligent and autonomous network management. As the number of machine learning (ML) techniques deployed in IBN increases, it becomes increasingly important to understand their expected performance. Whereas IBN concepts are generally specific to the use case envisioned, the underlying platforms are generally heterogenous, comprised of complex processing units, including CPU/GPU, CPU/FPGA and CPU/TPU combinations, which needs to be considered when running the ML techniques chosen. We focus on a case study of IBNs in the so-called ICT supply chain systems, where multiple ICT artifacts are integrated in one system based on heterogeneous hardware platforms. Here, we are interested in the problem of benchmarking the computational performance of ML technique defined by the intents. Our benchmarking method is based on collaborative filtering techniques, relying on ML-based methods like Singular Value Decomposition and Stochastic Gradient Descent, assuming initial lack of explicit knowledge about the expected number of operations, framework, or the device processing characteristics. We show that it is possible to engineer a practical IBN system with various ML techniques with an accurate estimated performance based on data from a few benchmarks only.

show abstract

“…That slice template is according to the network orchestrator acceptable format; for example, for theOSM core, the policy configurator can give the slice template in the form of a JSON file which contains the information related to the deployment of the network functions and their mapping. The design of the OSM policy configurator is well explained in our paper [38][39][40]. On the other hand, the RAN policy configurator also generates the policies' template in the form of JSON which could be further sent to the FLEXRAN controller for slice creation at eNodeB.…”

Section: Intent-based Networking (Ibn) Toolmentioning

confidence: 99%

“…At the end, the required network service is deployed according to NST configurations. The architectural design of policy configurator for OSM is presented in our paper [38,41].…”

Section: Osm Policy Configuratormentioning

confidence: 99%

Slicing the Core Network and Radio Access Network Domains through Intent-Based Networking for 5G Networks

et al. 2020

Self Cite

View full text Add to dashboard Cite

The fifth-generation mobile network presents a wide range of services which have different requirements in terms of performance, bandwidth, reliability, and latency. The legacy networks are not capable to handle these diverse services with the same physical infrastructure. In this way, network virtualization presents a reliable solution named network slicing that supports service heterogeneity and provides differentiated resources to each service. Network slicing enables network operators to create multiple logical networks over a common physical infrastructure. In this research article, we have designed and implemented an intent-based network slicing system that can slice and manage the core network and radio access network (RAN) resources efficiently. It is an automated system, where users just need to provide higher-level network configurations in the form of intents/contracts for a network slice, and in return, our system deploys and configures the requested resources accordingly. Further, our system grants the automation of the network configurations process and reduces the manual effort. It has an intent-based networking (IBN) tool which can control, manage, and monitor the network slice resources properly. Moreover, a deep learning model, the generative adversarial neural network (GAN), has been used for the management of network resources. Several tests have been carried out with our system by creating three slices, which shows better performance in terms of bandwidth and latency.

show abstract

Intent-Based End-to-End Network Service Orchestration System for Multi-Platforms

Cited by 43 publications

References 14 publications

Towards Crossfire Distributed Denial of Service Attack Protection Using Intent-Based Moving Target Defense Over Software-Defined Networking

Towards Crossfire Distributed Denial of Service Attack Protection Using Intent-Based Moving Target Defense Over Software-Defined Networking

Benchmarking Various ML Solutions in Complex Intent-Based Network Management Systems

Slicing the Core Network and Radio Access Network Domains through Intent-Based Networking for 5G Networks

Contact Info

Product

Resources

About