Enhancing Security by Using GIFT and ECC Encryption Method in Multi-Tenant Datacenters  

作　　者：Jin Wang Ying Liu Shuying Rao R.Simon Sherratt Jinbin Hu 

机构地区：[1]School of Computer&Communication Engineering,Changsha University of Science&Technology,Changsha,410004,China [2]School of Systems Engineering,The University of Reading,RG66AY,UK

出　　处：《Computers, Materials & Continua》2023年第5期3849-3865,共17页计算机、材料和连续体（英文）

基　　金：This work is supported by the National Natural Science Foundation of China(62102046,62072056);the Natural Science Foundation of Hunan Province(2022JJ30618,2020JJ2029);the Scientific Research Fund of Hunan Provincial Education Department(22B0300).

摘　　要：Data security and user privacy have become crucial elements in multi-tenant data centers.Various traffic types in the multi-tenant data center in the cloud environment have their characteristics and requirements.In the data center network(DCN),short and long flows are sensitive to low latency and high throughput,respectively.The traditional security processing approaches,however,neglect these characteristics and requirements.This paper proposes a fine-grained security enhancement mechanism(SEM)to solve the problem of heterogeneous traffic and reduce the traffic completion time(FCT)of short flows while ensuring the security of multi-tenant traffic transmission.Specifically,for short flows in DCN,the lightweight GIFT encryption method is utilized.For Intra-DCN long flows and Inter-DCN traffic,the asymmetric elliptic curve encryption algorithm(ECC)is utilized.The NS-3 simulation results demonstrate that SEM dramatically reduces the FCT of short flows by 70%compared to several conventional encryption techniques,effectively enhancing the security and anti-attack of traffic transmission between DCNs in cloud computing environments.Additionally,SEM performs better than other encryption methods under high load and in largescale cloud environments.

关 键 词：Multi-tenant DATACENTER user privacy transmission security GIFT ECC 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]