一种域适配混合遗传算法及在安全服务链编排中的验证  

A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration

作　　者：姚晓辉 李青[2] 孙焜焜[3] YAO Xiaohui;LI Qing;SUN Kunkun(Mobile Internet System and Application Security National Engineering Laboratory,Shanghai 201315,China;Research Institute o f China Telecom Co.,Ltd.,Shanghai 200122,China;Institute of Information Engineering,Chinese Academy of Science,Beijing 100093,China)

机构地区：[1]移动互联网系统与应用安全国家工程实验室,上海201315 [2]中国电信股份有限公司研究院,上海200122 [3]中国科学院信息工程研究所,北京100093

出　　处：《电信科学》2020年第5期16-24,共9页Telecommunications Science

基　　金：国家重点研发计划基金资助项目(NO.2017YFB0801801)。

摘　　要：面对不断变化的网络需求,用户对传统网络的要求也越来越高,灵活性、扩展性、易用性等特征已成为现代网络的必备要素。提出了一种域适配混合遗传算法(domain adaptive hybrid genetic algorithm,DAHGA),可应用于云数据中心租户的安全服务链编排,实现租户云安全服务与策略的自动加载与激活,满足租户云安全"按需定制"需求。同时针对云安全服务链编排上各种提升VNF放置效率的算法进行了实验对比研究,充分验证了本文算法的有效性,为云业务无损安全服务链编排技术的实现提供了借鉴和参考。Faced with changeful network demands, users have increasingly higher requirements for traditional network. Features such as flexibility, scalability and ease of use have become essential elements of modern network. A domain adaptive hybrid genetic algorithm(DAHGA) was proposed, which could be applied to the security service chain arrangement of cloud data center tenants, to achieve automatic loading and activation of tenant cloud security services and policies, to meet tenant cloud security "customization on demand" requirements. And conducts experimental comparison research on the effective placement efficiency of each VNF on the cloud security service chain orchestration was carried out, which fully validated the proposed algorithm. Effectiveness provides a reference and reference for the realization of cloud business non-destructive security service chain orchestration technology.

关 键 词：云安全 安全域 安全服务链 NFV VNF 遗传算法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]