Resource consumption and security-aware multi-tenant service function chain deployment based on hypergraph matching

Liu, Feng; Yu, Peng; Zhou, Fanqin; Wu, Zihao; Qiu, Xuesong; Li, Jingchun; Zhu, Yanyan

doi:10.1016/j.comnet.2022.109298

Cited by 6 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Recently, the security-aware SFC has attracted great attention from academic groups [17], [23], [30]- [32]. The authors of [30] mainly studied the implementation of SFC and proposed two algorithms that can guarantee privacy and security, and optimize the deployment time, respectively.…”

Section: Securitymentioning

confidence: 99%

“…Meanwhile, the authors of [32] proposed a flexible and configurable dynamic composition mechanism of the security service function chain, and this mechanism establishes a combined model based on vector space and integer programming, which reduces the transmission delay but increases the new reconstruction operation time overhead. The authors of [23] first proposed security constraints based on physical isolation and formulated the problem of reasonably placing multi-tenant SFCs subject to multiple constraints to minimize resource consumption, and they proposed a hypergraph matching algorithm to find the maximum weight subset of hypergraphs whose vertices do not intersect to give a high degree of physical isolation by dealing with the conflict graphs.…”

Section: Securitymentioning

confidence: 99%

“…We extend state-of-the-art SFC protection schemes for comparison purposes [22], [23]. We implement [23] by: (i) constructing a hyper-graph to get all SFs cost and security, (ii) according to the ratio of cost and security to construct a pair of Sec-SFC, (iii) use layered graph mapping technique to create a primary SFP, (iv) pruning the created SFP from the PN, and creating the backup SFP via layered graph mapping technique. This method ID is denoted by greedy based on hyper graph (GB-HG).…”

Section: Performance Evaluation On Diverse Protection Approachesmentioning

confidence: 99%

“…Then, we combined these two techniques to form our algorithm called Augmenting-Path with Primary-First Disjoint SFP Identifier (APPF-DSI). Last but not least, compared to the schemes directly extended from the existing works [22], [23], extensive simulations show APPF-DSI can significantly reduce the implementation cost.…”

mentioning

confidence: 99%

See 3 more Smart Citations

Security-Aware Service Function Chaining and Embedding With Asymmetric Dedicated Protection

Wang,

Li,

Cao

et al. 2024

IEEE Access

View full text Add to dashboard Cite

In the 5G and beyond 5G networks, achieving security-aware data transmission needs to convert clients' requests into a service function chain (SFC), each service function (SF) providing a certain security guarantee. With diverse configuration techniques, an SF may own multiple versions, each version providing various security guarantees with diverse costs. In addition, as the recent software failures have caused severe financial loss, great attentions from both academia and industry have been put onto the SFC reliability. In the literature, existing works have solely investigated the following two fields: (i) how to deploy a security-aware SFC, and (ii) how to protect a traditional SFC. Simply applying these techniques to dealing with the problem of security-aware SFC protection might not be efficient as the backup and primary SFCs may not be identical for security-aware SFCs. Therefore, how to jointly take these fields into account is challenging and remains open. To tackle the above problem, this paper studies how to construct and embed a security-aware SFC with asymmetric dedicated protection. We mathematically define this problem and name it security-aware service function chaining, embedding, and protection with multi-versioned SFs (SFCEP-MF) with the objective of cost optimization. Next, to optimize the SFCEP-MF problem, we construct an efficient algorithm, called augmenting-path with primary-first disjoint SFP identifier (APPF-DSI). Extensive simulation results show that the APPF-DSI algorithm outperforms the benchmark approaches that are directly extended from the state-of-the-art.INDEX TERMS Network function virtualization, service function with multi-versions, service function chaining and embedding, security, reliability I. INTRODUCTIONRecently, due to the frequent cyber-attack issues [11], the SFC security attracts great attentions from both industry and academia. To defend against various network attacks security-

show abstract