| 基于隔离等级的网络切片部署方法 |
| |
| 作者姓名： | 潘启润 黄开枝 游伟 |
| |
| 作者单位： | 战略支援部队信息工程大学，河南 郑州 450001 |
| |
| 基金项目： | 国家重点研发计划网络空间安全专项基金资助项目(No.2016YFB0801605);国家自然科学基金创新群体基金资助项目(No.61521003);国家自然科学基金资助项目(No.61801515)。 |
| |
| 摘 要： | 为了兼顾网络切片的性能隔离需求和安全隔离需求，提出了一种基于隔离等级的网络切片部署方法。该方法首先从性能隔离和安全隔离两方面确定了网络切片实例的隔离等级，在选择合适的位置部署虚拟节点时，不但保证所有网络切片实例均能达到各自的性能水平和安全水平，而且从隔离等级差值入手对虚拟节点共存的条件进行限制；然后利用整数线性规划方法对该问题进行建模，把部署成本最小化作为目标函数；最后使用基于遗传算法改进的粒子群算法求出最终的部署结果。仿真结果表明，该方法具有较低的部署成本和较高的收益开销比，并且能够同时保证性能和安全两方面的需求。
|
| 关 键 词： | 网络切片 隔离 性能下降 侧信道攻击 |
Network slicing deployment method based on isolation level |
| |
| Authors: | PAN Qirun HUANG Kaizhi YOU Wei |
| |
| Affiliation: | Strategic Support Force Information Engineering University,Zhengzhou 450001,China |
| |
| Abstract: | In order to balance the performance isolation requirements and security isolation requirements of network slicing,a network slice deployment method based on isolation level was proposed.The method first determined the isolation level of the network slice instance from the aspects of performance isolation and security isolation.When deploying the virtual nodes in the appropriate location,not only ensured that all network slice instances could reach their respective performance levels and security levels,but also isolated them.The gradation difference started to limit the coexistence condition of the virtual node.Then the integer linear programming method was used to model the problem,and the deployment cost was minimized as the objective function.Finally,the particle swarm optimization algorithm based on genetic algorithm was used to find the final deployment result.The simulation results show that the method has lower deployment cost and higher benefit-to-cost ratio,and can guarantee both performance and security. |
| |
| Keywords: | network slicing isolation performance degradation side channel attack |
| 本文献已被 维普 等数据库收录！ |
| 点击此处可从《》浏览原始摘要信息 |
|
点击此处可从《》下载全文 |
