• KSII Transactions on Internet and Information Systems
    Monthly Online Journal (eISSN: 1976-7277)

Virtual Network Embedding through Security Risk Awareness and Optimization

Vol. 10, No. 7, July 30, 2016
10.3837/tiis.2016.07.002, Download Paper (Free):

Abstract

Network virtualization promises to play a dominant role in shaping the future Internet by overcoming the Internet ossification problem. However, due to the injecting of additional virtualization layers into the network architecture, several new security risks are introduced by the network virtualization. Although traditional protection mechanisms can help in virtualized environment, they are not guaranteed to be successful and may incur high security overheads. By performing the virtual network (VN) embedding in a security-aware way, the risks exposed to both the virtual and substrate networks can be minimized, and the additional techniques adopted to enhance the security of the networks can be reduced. Unfortunately, existing embedding algorithms largely ignore the widespread security risks, making their applicability in a realistic environment rather doubtful. In this paper, we attempt to address the security risks by integrating the security factors into the VN embedding. We first abstract the security requirements and the protection mechanisms as numerical concept of security demands and security levels, and the corresponding security constraints are introduced into the VN embedding. Based on the abstraction, we develop three security-risky modes to model various levels of risky conditions in the virtualized environment, aiming at enabling a more flexible VN embedding. Then, we present a mixed integer linear programming formulation for the VN embedding problem in different security-risky modes. Moreover, we design three heuristic embedding algorithms to solve this problem, which are all based on the same proposed node-ranking approach to quantify the embedding potential of each substrate node and adopt the k-shortest path algorithm to map virtual links. Simulation results demonstrate the effectiveness and efficiency of our algorithms.


Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2015)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article

[IEEE Style]
S. Gong, J. Chen, C. Huang, Q. Zhu, S. Zhao, "Virtual Network Embedding through Security Risk Awareness and Optimization," KSII Transactions on Internet and Information Systems, vol. 10, no. 7, pp. 2892-2913, 2016. DOI: 10.3837/tiis.2016.07.002.

[ACM Style]
Shuiqing Gong, Jing Chen, Conghui Huang, Qingchao Zhu, and Siyi Zhao. 2016. Virtual Network Embedding through Security Risk Awareness and Optimization. KSII Transactions on Internet and Information Systems, 10, 7, (2016), 2892-2913. DOI: 10.3837/tiis.2016.07.002.

[BibTeX Style]
@article{tiis:21143, title="Virtual Network Embedding through Security Risk Awareness and Optimization", author="Shuiqing Gong and Jing Chen and Conghui Huang and Qingchao Zhu and Siyi Zhao and ", journal="KSII Transactions on Internet and Information Systems", DOI={10.3837/tiis.2016.07.002}, volume={10}, number={7}, year="2016", month={July}, pages={2892-2913}}