基于隔离等级的网络切片部署方法

doi:10.11959/j.issn.2096-109x.2020003

网络与信息安全学报 ›› 2020, Vol. 6 ›› Issue (2): 96-105.doi: 10.11959/j.issn.2096-109x.2020003

基于隔离等级的网络切片部署方法

潘启润,黄开枝,游伟

战略支援部队信息工程大学，河南郑州 450001

修回日期:2019-06-06 出版日期:2020-04-15 发布日期:2020-04-23
作者简介:潘启润（1993- ），女，河北石家庄人，战略支援部队信息工程大学硕士生，主要研究方向为新一代移动通信技术、网络切片|黄开枝（1973- ），女，安徽滁州人，战略支援部队信息工程大学教授、博士生导师，主要研究方向为移动通信、无线物理层安全|游伟（1984- ），男，江西丰城人，战略支援部队信息工程大学讲师，主要研究方向为密码学、5G网络安全
基金资助:
国家重点研发计划网络空间安全专项基金资助项目(2016YFB0801605);国家自然科学基金创新群体基金资助项目(61521003);国家自然科学基金资助项目(61801515)

Network slicing deployment method based on isolation level

Qirun PAN,Kaizhi HUANG,Wei YOU

Strategic Support Force Information Engineering University,Zhengzhou 450001,China

Revised:2019-06-06 Online:2020-04-15 Published:2020-04-23
Supported by:
The National Key R＆D Program Cyberspace Security Project(2016YFB0801605);The National Natural Science Foundation Innovation Group Project(61521003);The National Natural Science Foundation of China(61801515)

摘要/Abstract

摘要：

为了兼顾网络切片的性能隔离需求和安全隔离需求，提出了一种基于隔离等级的网络切片部署方法。该方法首先从性能隔离和安全隔离两方面确定了网络切片实例的隔离等级，在选择合适的位置部署虚拟节点时，不但保证所有网络切片实例均能达到各自的性能水平和安全水平，而且从隔离等级差值入手对虚拟节点共存的条件进行限制；然后利用整数线性规划方法对该问题进行建模，把部署成本最小化作为目标函数；最后使用基于遗传算法改进的粒子群算法求出最终的部署结果。仿真结果表明，该方法具有较低的部署成本和较高的收益开销比，并且能够同时保证性能和安全两方面的需求。

关键词: 网络切片, 隔离, 性能下降, 侧信道攻击

Abstract:

In order to balance the performance isolation requirements and security isolation requirements of network slicing,a network slice deployment method based on isolation level was proposed.The method first determined the isolation level of the network slice instance from the aspects of performance isolation and security isolation.When deploying the virtual nodes in the appropriate location,not only ensured that all network slice instances could reach their respective performance levels and security levels,but also isolated them.The gradation difference started to limit the coexistence condition of the virtual node.Then the integer linear programming method was used to model the problem,and the deployment cost was minimized as the objective function.Finally,the particle swarm optimization algorithm based on genetic algorithm was used to find the final deployment result.The simulation results show that the method has lower deployment cost and higher benefit-to-cost ratio,and can guarantee both performance and security.

Key words: network slicing, isolation, performance degradation, side channel attack

中图分类号:

TP393

潘启润,黄开枝,游伟. 基于隔离等级的网络切片部署方法[J]. 网络与信息安全学报, 2020, 6(2): 96-105.

Qirun PAN,Kaizhi HUANG,Wei YOU. Network slicing deployment method based on isolation level[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 96-105.

图/表 13

图1

图2

图3

表1

隔离等级　Table 1 Isolation level"

隔离等级	$P e r f_{v}^{j}$ 数值范围	$σ_{v}^{j}$ 数值范围
1级（较高）	(0,0.2]	$[0, m \cdot \frac{φ}{5}]$
2级（高）	(0.2,0.4]	$(2 m \cdot \frac{φ}{5}, 4 m \cdot \frac{φ}{5}]$
3级（中）	(0.4,0.6]	$(4 m \cdot \frac{φ}{5}, 6 m \cdot \frac{φ}{5}]$
4级（普通）	(0.6,0.8]	$(6 m \cdot \frac{φ}{5}, 8 m \cdot \frac{φ}{5}]$
5级（较低）	(0.8,1]	$(8 m \cdot \frac{φ}{5}, m φ]$

表1

图4

表2

表3

图5

图6

图7

图8

图9

图10

参考文献 16

[1]	FOUKAS X , PATOUNA S G ， ELMOKASHFIA ,et al. Network slicing in 5G:survey and challenges[J]. IEEE Communications Magazine, 2017,55(5): 94-100.
[2]	ZHU Q , ZHU J D , AGRAWALG . Power-aware consolidation of scientific workflows in virtualized environments[C]// High Performance Computing,Networking,Storage ＆ Analysis. 2010: 1-12.
[3]	XU F , LIU F M , LIU L H ,et al. iAware:making live migration of virtual machines interference-aware in the cloud[J]. IEEE Transactions on Computers, 2014,63(12): 3012-3025.
[4]	ALANR , AMANK , SRIRAMG , ，et al. PACMan:performance aware virtual machine consolidation[C]// The 10th International Conference on Autonomic Computing. 2013: 83-94.
[5]	ROOZBEHM , ALBERTY Z , . Managing performance degradation of collocated virtual machines in private cloud[C]// The 18th International Conference on High Performance Computing and Communications. 2016: 128-135.
[6]	GULMEZOGLUB , MEHMETS i , IRAZOQUIG ,et al. Cross-VM cache attacks on AES[J]. IEEE Transactions on Multi-Scale Computing Systems, 2017,2(3): 211-222.
[7]	HAN Y , CHAN J , ALPCAN T ,et al. Using virtual machine allocation policies to defend against co-resident attacks in cloud computing[J]. IEEE Transactions on Dependable and Secure Computing, 2017,14(1): 95-108.
[8]	AHMED H A , GEORGE A , MINA G ,et al. It's time to migrate! A game-theoretic framework for protecting a multi-tenant cloud against collocation attacks[C]// IEEE International Conference on Cloud Computing. 2018: 725-731.
[9]	YU S , GUI X , LIN J ,et al. A security-awareness virtual machine management scheme based on Chinese wall policy in cloud computing[J]. The Scientific World Journal, 2014(5): 805-923.
[10]	LIANG X , GUI X L , JIANA N ,et al. Mitigating cloud co-resident attacks via grouping-based virtual machine placement strategy[C]// IEEE International Performance Computing and Communications Conference. 2017: 1-8.
[11]	SAMAM R , AN X L , WEI Q ,et al. Reshaping the mobile core network via function decomposition and network slicing for the 5G era[C]// IEEE Wireless Communications and Networking Conference Workshops. 2016: 90-96.
[12]	SAMEERKUMARS , RAYMONDM , ANDREAF . A cloud-native approach to 5G network slicing[J]. IEEE Journals ＆ Magazines, 2017,55(8): 120-127.
[13]	TOMASL , LAKEWE B , ELMROTHE , . Service level and performance aware dynamic resource allocation in overbooked data centers[C]// IEEE/ACM International Symposium on Cluster. 2016.
[14]	梁鑫, 桂小林, 戴慧珺 ,等. 云环境中跨虚拟机的 Cache 侧信道攻击技术研究[J]. 计算机学报, 2017,40(2): 317-336.
	LIANG X , GUI X L , DAI H J ,et al. Research on Cache side channel attack technology of virtual machines in cloud environment[J]. Chinese Journal of Computers, 2017,40(2): 317-336.
[15]	潘勇, 郭晓东 . 一种基于遗传算法改进的粒子群优化算法[J]. 计算机应用与软件, 2011,28(9): 222-224.
	PAN Y , GUO X D . An improved particle swarm optimization algorithm based on genetic algorithm[J]. Computer Applications and Software, 2011,28(9): 222-224.
[16]	赵硕, 季新生, 毛宇星 ,等. 基于安全等级的虚拟机动态迁移方法[J]. 通信学报, 2017,38(7): 165-174.
	ZHAO S , JI X S , MAO Y X ,et al. Research on dynamic migration of virtual machine based on security level[J]. Journal on Communications, 2017,38(7): 165-174.

参数	物理网络	网络切片实例
网络模型	纯随机	纯随机
节点连接概率p	0.2	0.5
节点个数	50	服从U[3,5]
节点和链路资源容量	服从U[50,100]	服从U[5,20]
请求到达	无	服从每100个时间单元到达5个泊松分布
请求生命周期	无	服从均值为2 000个时间单元的指数分布

网络参数	取值
最大迭代次数	60
种群规模	40
c₁、c₂	1.494 45
λ	0.6
pc	0.7
pm	0.3

基于隔离等级的网络切片部署方法

Network slicing deployment method based on isolation level

在线阅读

pdf下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 13

参考文献 16

相关文章 11

Metrics

推荐阅读 0

[1]	徐子钧, 刘建伟, 李耕. 面向5G mMTC的网络切片安全研究[J]. 网络与信息安全学报, 2022, 8(1): 95-105.
[2]	裘佳浩, 邱卫东, 王杨德, 查言, 谢宇明, 李岩. 智能化的安卓手势密码取证关键技术[J]. 网络与信息安全学报, 2022, 8(1): 118-127.
[3]	李玎, 祝跃飞, 芦斌, 林伟. 网络加密流量侧信道攻击研究综述[J]. 网络与信息安全学报, 2021, 7(4): 114-130.
[4]	孔凡玉,乔咏,刘蓬涛,刘晓东,周大水. RSA-CRT密码防御算法的故障注入攻击[J]. 网络与信息安全学报, 2019, 5(1): 30-36.
[5]	陈强,刘彩霞,李凌书. 基于粒子群优化算法的5G网络切片功能迁移机制[J]. 网络与信息安全学报, 2018, 4(8): 47-55.
[6]	陈强,刘彩霞,李凌书. 基于改进式贪婪算法的5G网络切片动态资源调度策略[J]. 网络与信息安全学报, 2018, 4(7): 60-68.
[7]	孙志勇,季新生,游伟,袁泉. 基于安全分级的网络切片备份与重映射方法研究[J]. 网络与信息安全学报, 2018, 4(11): 49-57.
[8]	赵硕,季新生,程国振,毛宇星. 面向多租户的关键虚拟机动态迁移方法研究[J]. 网络与信息安全学报, 2017, 3(8): 8-17.
[9]	任君,熊金波,姚志强. 基于差分隐私模型的云数据副本安全控制方案[J]. 网络与信息安全学报, 2017, 3(5): 38-46.
[10]	贾徽徽,王潮,顾健,宋好好,唐迪. ECC计时攻击研究与仿真[J]. 网络与信息安全学报, 2016, 2(4): 56-63.
[11]	刘宇涛,陈海波. 虚拟化安全：机遇，挑战与未来[J]. 网络与信息安全学报, 2016, 2(10): 17-28.