基于异构备份与重映射的服务功能链部署方案  

Service function chain deployment scheme based on heterogeneous backup and remapping

作　　者：谢记超 伊鹏[1] 张震[1] 张传浩[1,2] 谷允捷[1] XIE Jichao;YI Peng;ZHANG Zhen;ZHANG Chuanhao;GU Yunjie(National Digital Switching System Engineering&Technological Research Center,Zhengzhou 450002,China;Public Security Technology Department,Rail Police College,Zhengzhou 450053,China)

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002 [2]铁道警察学院公安技术系,河南郑州450053

出　　处：《网络与信息安全学报》2018年第6期23-35,共13页Chinese Journal of Network and Information Security

基　　金：国家重点研发计划基金资助项目(No.2016YFB0801200;No.2017YFB0801200);国家网络空间安全专项基金资助项目(No.2017YFB0803204);公安部科技计划基金资助项目(No.2017JSYJC08)~~

摘　　要：网络功能虚拟化技术提高了服务功能链部署的灵活性,然而虚拟网络功能面临着不确定失效和恶意攻击问题,现有的冗余备份部署方法能在一定程度上解决虚拟网络功能的失效问题,但未考虑节点同构性在面临恶意攻击时的缺陷。为此提出一种考虑节点异构性的部署方法,在进行冗余备份和重映射时保证节点的异构性。实验表明,相比于同构备份方法,所提方法在请求接受率下降3.8%,带宽消耗增加9.2%的情况下,显著提高了攻击者的攻击时间成本。Network function virtualization technology improves the flexibility of service function chains'deployment.However,the virtual network functions are under the pressure of uncertain failures and malicious attacks.The existing redundant backup methods can solve the problem of VNF failures to some extent,it does not consider the defects of node homogeneity in the face of malicious attacks.A deployment method considering the heterogeneity of nodes was proposed,guaranteeing the heterogeneity of nodes when perform redundant backup and remapping.Simulation experiments demonstrate that the proposed method significantly increases attacker's attack time cost under the cost of the request acceptance rate decreases by 3.8%and the bandwidth consumption increase by 9.2%comparing to the homogeneity backup method.

关 键 词：网络功能虚拟化 服务功能链 虚拟网络功能 可靠性 备份 同构性 异构性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]