A QoS Assured Network Service Chaining Algorithm in Network Function Virtualization Architecture

Kim, Taekhee; Kim, Siri; Lee, Kwonyong; Park, Sung-Yong

doi:10.1109/ccgrid.2015.135

Cited by 20 publications

(3 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hence, legitimate and trusted source IP addresses are unable to access the destination service due to some overloaded VNFs in their SFC. Accordingly, a demanding requirement for the SDN-based cloud provider is to provide a security mechanism for customer traffic before forwarding the filtered traffic to their SFCs to ensure the SFC quality of service (QoS) [38]. This leads to our second goal is to keep the traffic to the mth customer's SFC always being less or equal than the B m (bps) from the border OpenFlow switches.…”

Section: A System Analysis and Goalsmentioning

confidence: 99%

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

Phan

Park

2019

IEEE Access

View full text Add to dashboard Cite

Software-defined networking (SDN) is the key outcome of extensive research efforts over the past few decades toward transforming the Internet infrastructure to be more programmable, configurable, and manageable. However, critical cyber-threats in the SDN-based cloud environment are rising rapidly, in which distributed denial-of-service (DDoS) attack is one of the most damaging cyber attacks. In this paper, we propose an efficient solution to tackle DDoS attacks in the SDN-based cloud environment. We first introduce a new hybrid machine learning model based on support vector machine and selforganizing map algorithms to improve the traffic classification. Then, we propose an enhanced historybased IP filtering scheme (eHIPF) to improve the attack detection rate and speed. Finally, we introduce a novel mechanism that combines both the hybrid machine learning model and the eHIPF scheme to make a DDoS attack defender for the SDN-based cloud environment. The testbed is implemented in an SDN-based cloud with service function chaining. Through practical experiments, the proposed DDoS attack defender is proven to outperform existing mechanisms for DDoS attack classification and detection. The comprehensive experiments conducted with various DDoS attack levels prove that the proposed mechanism is an effective, innovative approach to defend DDoS attacks in the SDN-based cloud. INDEX TERMS Distributed denial-of-service attacks, machine learning, software defined networks, network function virtualization.

show abstract

Section: A System Analysis and Goalsmentioning

confidence: 99%

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

Phan

Park

2019

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Kim et al [30] presented a SFC deployment algorithm to ensure QoS from the perspective of service providers, the algorithm mainly ensures QoS, but does not compare with the existing algorithms, and it cannot reflect the real performance. In order to address network attacks, Park et al [31] presented QoSE, a security solution that offers adaptive security service based on the NFV.…”

Section: Related Work a Sfcs Deployment In Federated Cloudmentioning

confidence: 99%

On Orchestrating Service Function Chains in 5G Mobile Network

et al. 2019

View full text Add to dashboard Cite

As two of the key technologies of 5G, fog-based radio access network and network function virtualization have become an important direction for the radio network architecture evolution. Virtual network functions (VNFs) compose the service function chain (SFC) in a particular order, and the mobile network users communicate with each other or service terminals through SFCs. For service providers, it is crucially important for efficient deploying/mapping SFCs into the 5G mobile network since the SFCs deployment problem is an NP-hard problem. In this paper, we propose the efficient SFCs deployment algorithms for solving this challenge with two main design goals: 1) minimizing the cost of link resource, i.e., minimizing the path length of the entire SFC by combining VNFs and mapping temporary links and 2) minimizing the cost of computing resources by using the existing virtual machines as much as possible while performing the same VNF. We model the SFCs deployment problem as an optimization problem by using ILP as well as devise the heuristic algorithms to make the tradeoff between these two conflicting design goals. From simulation results, we can see that the performance of our proposed algorithms is promising in terms of the total SFCs mapping cost, total links mapping cost, and blocking ratio. INDEX TERMS Service function chain, fog-based radio access network, virtual network function, network function virtualization, deployment, 5G mobile network.

show abstract

“…The simulation results show that this method can significantly reduce service cost. Kim et al [27] propose an SFC deployment strategy to improve QoS. However, unilaterally emphasizing QoS would affect the revenue of operators.…”

Section: Introductionmentioning

confidence: 99%

A Service Function Chain Deployment Method Based on Network Flow Theory for Load Balance in Operator Networks

Han

Meng

et al. 2020

IEEE Access

View full text Add to dashboard Cite

Network function virtualization technology makes the deployment and management of network service more flexible and elastic by decoupling network function from dedicated hardware. The service requests of network function virtualization are usually deployed in the form of a service function chain. In order to solve the problems of load imbalance, unreasonable utilization of substrate resources, and the high delay of the service function chain deployment in operator networks, a service function chain deployment method based on the network flow theory is proposed in this paper. First, on the basis of perceiving the substrate network resources and topology with a software-defined network controller in real time, a candidate node set is determined according to the resource constraints and the locations of ingress/egress switch nodes that service flow flows in/out. Second, the candidate node set, the ingress/egress switch nodes and the connection between them are used to form a directed network, and the service function chain deployment problem is transformed into an optimal path selection problem. Then, a node disassembling method is used to transform the directed network into a capacity-flow-cost network. Finally, a minimum-cost maximum-flow algorithm is used to find the optimal deployment path and complete the service function chain deployment. Experiments show that the method proposed in this paper can guarantee the load balance of operator networks, reduce the average transmission delay of service flow, and make the utilization of substrate resources more reasonable.INDEX TERMS Network function virtualization, service function chain, node disassembling method, virtual network functions combination, minimum-cost maximum-flow.

show abstract

A QoS Assured Network Service Chaining Algorithm in Network Function Virtualization Architecture

Cited by 20 publications

References 5 publications

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

On Orchestrating Service Function Chains in 5G Mobile Network

A Service Function Chain Deployment Method Based on Network Flow Theory for Load Balance in Operator Networks

Contact Info

Product

Resources

About