A Novel and Secure Service Function Chains Embedding Framework for NFV-Enabled Networks

Recently, network function virtualization (NFV) technology is strongly emphasized by the telecommunication industry, aiming at virtualizing physical resources, providing more agile and high-quality virtual network services and reducing telecommunication provider costs. In NFV environment, each network service (NS) is usually represented by a sequences of service function chains (SFCs). The issue of SFC composition, embedding and scheduling is regarded as the key issue in NFV research. Most of previous researchers focus on solving SFC embedding (SFC-E) problem and proposing effective embedding algorithms. Correspondingly, there exist dozens of embedding publications in the literature. However, few researchers studied the secure SFC-E problem. Hence, we research this topic and discuss the typical security risks in NFV-enabled networks. Then, we propose one novel and secure framework, labeled as No-Sec-SFC-E, in this paper. The goal of No-Sec-SFC-E is to ensure secure network function deployment and resource allocation in NFV-enabled networks. In No-Sec-SFC-E framework, virtual network functions (VNFs), having high security probabilities, are usually preferred. With the aiming of validating the proposed No-Sec-SFC-E framework, we conduct the experiment. Recorded experiment results vividly reveal the feasibility and effectiveness of NoSec-SFC-E.

[1]  Ghasem Mirjalily,et al.  Optimal Network Function Virtualization and Service Function Chaining: A Survey , 2018, Chinese Journal of Electronics.

[2]  Juan Felipe Botero,et al.  Resource Allocation in NFV: A Comprehensive Survey , 2016, IEEE Transactions on Network and Service Management.

[3]  Chadi Assi,et al.  Scheduling service function chains for ultra-low latency network services , 2017, 2017 13th International Conference on Network and Service Management (CNSM).

[4]  Longxiang Yang,et al.  New functions added to ALEVIN for evaluating virtual network embedding , 2016, 2016 2nd IEEE International Conference on Computer and Communications (ICCC).

[5]  Filip De Turck,et al.  Network Function Virtualization: State-of-the-Art and Research Challenges , 2015, IEEE Communications Surveys & Tutorials.

[6]  Chadi Assi,et al.  Delay-Aware Scheduling and Resource Optimization With Network Function Virtualization , 2016, IEEE Transactions on Communications.

[7]  Ying-Dar Lin,et al.  Energy Cost Optimization in Dynamic Placement of Virtualized Network Function Chains , 2018, IEEE Transactions on Network and Service Management.

[8]  Mostafa Ammar,et al.  An Approach for Service Function Chain Routing and Virtual Function Network Instance Migration in Network Function Virtualization Architectures , 2017, IEEE/ACM Transactions on Networking.

[9]  Ying Wang,et al.  Service function chain orchestration across multiple clouds , 2018, China Communications.

[10]  Didem Gözüpek,et al.  Secure virtual network embedding with flexible bandwidth-based revenue maximization , 2017, Comput. Networks.

[11]  Wei Yang,et al.  A survey on security in network functions virtualization , 2016, 2016 IEEE NetSoft Conference and Workshops (NetSoft).

[12]  Thomas H. Cormen,et al.  Introduction to algorithms [2nd ed.] , 2001 .