Modeling Security Requirements for VNE algorithms

Abstract

Public and private Infrastructure as a Service (IaaS) clouds are widely used by individuals and organizations to provision flexible virtual computing resources on demand. Virtual Network Embedding (VNE) algorithms are employed in this context to provide an automated resource assignment. With multiple involved parties, security-aware Virtual Machine (VM) placement becomes highly relevant for production environments. Moreover, VNE algorithms should also consider the security requirements of the interconnections between VMs, thereby extending the problem to networks. This paper discusses security requirements of Virtual Networks (VNs) and shows how they can be modeled in VNE to map them to the provided security mechanisms in the physical network. The paper also presents an implementation of this security-aware VNE model in the public simulation platform ALEVIN, demonstrating the applicability with a realistic use case of such a model.

Virtual Network Embedding Based on Security Level with VNF Placement

“…Moreover, a link between two virtual nodes can also be virtualized [2]. Virtual nodes and virtual links have to be placed in physical networks efficiently by considering storages availability, bandwidth availability, and security protection [9,11,[13][14][15].…”

“…The usage of security VNF can improve the protection of virtual networks [19,20]. Here, the security of virtual networks has been studied in [10,11,15,19] and some methods have been proposed. With these methods, the virtual network can be embedded in substrate networks by considering the security.…”

“…With these methods, the virtual network can be embedded in substrate networks by considering the security. However, [10,11,15,19] have not considered the utilization of security VNFs in order to improve the protection of virtual networks. As a result, some virtual networks may not be embedded due to a low security.…”

“…Reference [15] has classified the security requirements for virtual network into three requirements. Those three requirements are node requirements, link requirements, and topology requirements.…”

“…Therefore, in order to embed many virtual networks, the security level is expected to be improved by placing security VNFs. However, in [9][10][11]15], such security VNFs are not utilized.…”