Virtual Network Embedding Based on Security Level with VNF Placement

Abstract

In this paper, in order to embed virtual networks by considering network security, we propose a virtual network embedding based on security level with VNF placement. In this method, virtual networks are embedded in a substrate network by considering security and some security VNFs are placed in order to increase the security level of substrate networks. By using our proposed method, many virtual networks can be embedded by considering security level. As a result, the reward can be increased and the cost of placing VNFs is not increased so much. We evaluate the performance of our proposed method with simulation. The performance of this method is compared with the performance of a method that places VNFs randomly and the performance of a method without placing VNFs. From numerical examples, we investigate the effectiveness of this method. In numerical examples, we show that the proposed method is effective in embedding virtual networks by considering network security.

Optimal Construction of Service Function Chains Based on Security Level for Improving Network Security

“…In terms of the security requirements, virtual network embedding has been considered in the literature [5], [26]. Reference [5] has introduced a security level to indicate standard protection.…”

“…A virtual network can be embedded in the substrate network if the security level of the substrate network is equal to or higher than that of the virtual network. Reference [26] has also considered the construction of virtual networks based on the security level for network security. In this construction, security VNFs are added in some substrate nodes for increasing those security level to satisfy the security level of each virtual network.…”

“…In this section, we explain a system model that has extended the model in [26]. Note that in the model, only security VNFs are utilized and other types of VNFs such as routers and load balancing are not utilized.…”

“…Our proposed method considers the security level of each security VNF according to [26], where virtual networks are constructed based on [5]. However, [26] has not focused on service function chaining.…”

“…Our proposed method considers the security level of each security VNF according to [26], where virtual networks are constructed based on [5]. However, [26] has not focused on service function chaining. Therefore, we believe that this paper is the first research on service function chaining with security VNFs by considering security level.…”