Optimal Construction of Service Function Chains Based on Security Level for Improving Network Security

Abstract

In this paper, in order to improve network security, we propose an optimal placement of security virtual network function (security VNF) for service function chains based on the security level. In this method, an optimization problem is formulated for constructing service function chains based on the security level, and its near-optimal solution is derived with genetic algorithm. From the derived solution, security VNFs are placed to satisfy the security level of each service function chaining and many service function chains can be constructed to obtain higher revenue and less cost while considering the security level. We evaluate the performance of our proposed method with simulation, and the performance of this method is compared with the performance of other methods where security VNFs are selected based on those CPU resources. Numerical examples show that the proposed method is effective to construct service function chains by using security VNFs in order to improve network security.INDEX TERMS Network security, service function chain, virtual network function.

QoS-aware service composition based on context-free grammar and skyline in service function chaining using genetic algorithm

“…The following QoS-based composition methods were compared by performance: ILP (integer linear programming model): This is the typical global optimization method with all service competitors represented in it (Lodi & Nagarajan, 2019). GA: In this method, service compositions are generated by the GA with all services (Dwiardhika & Tachibana, 2019). KS: This signifies the K-means method used with Skyline service candidates (Kumar & Purohit, 2016).…”

“…To finding the best answer to the QoS-based service composition problem, some methods can be used, such as Integer linear programming (ILP) techniques, called an optimization algorithm (Liang et al, 2019;Lodi & Nagarajan, 2019;Wang et al, 2019). But some heuristic methods like a genetic algorithm (GA) can be used, known as an approximation algorithm (Dwiardhika & Tachibana, 2019).…”

SDN/NFV-Based Security Service Function Tree for Cloud

“…Liu et al [10] proposed a system architecture solution that uses SDN and NFV to control virtualized security resources for security service function chain construction. Dwiardhika and Tachibana [11] proposed an optimal placement of security virtual network functions for the security service function chains based on the security level. Shameli-Sendi et al [12] proposed a security approach for cloud infrastructure that incorporates the best practice, know-how of the security experts, and various security constraints into a network security pattern.…”