Security function service chain deployment method

A security function and service chain technology, applied in the field of security function service chain deployment, can solve the problem of not considering computing resources and storage resources, only considering bandwidth requirements, etc., to achieve the effect of low network cost

Inactive Publication Date: 2019-01-18
BEIJING INST OF COMP TECH & APPL
View PDF4 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Some solutions limit physical nodes to provide only one security function, and only consider the bandwidth requirements between security functions, and do not consider the computing resources and storage resources required for the deployment of security functions

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Security function service chain deployment method
  • Security function service chain deployment method
  • Security function service chain deployment method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0033]In order to make the purpose, content, and advantages of the present invention clearer, the specific implementation manners of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

[0034] Unlike existing deployment methods that limit physical nodes to only provide a certain security function, the security function service chain deployment method proposed in the present invention considers the fact that physical nodes can provide multiple security functions, which is more in line with real applications Scenes. Such as image 3 The schematic diagram of the underlying network topology shown, the underlying network topology G S Contains a total of 15 physical nodes, that is, the physical node set V S ={v 1 ,v 2 ,v 3 ,v 4 ,v 5 ,v 6 ,v 7 ,v 8 ,v 9 ,v 10 ,v 11 ,v 12 ,v 13 ,v 14 ,v 15}. Among them, the set of forwarding nodes T S and the security function node set N S Respectively T S...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a security function service chain deployment method, and relates to the technical field of network security. The invention gives consideration to a condition that a physical node can provide various types of security functions, and proposes the security function service chain deployment method. Based on the weight correlation among the required calculation resource demand,storage resource demand and network resource demand, the method achieves the comprehensive evaluation of the resources required by the deployment of a service chain, achieves the deployment of the security function service chain according to the size of the comprehensive demand for the service chain, and achieves the minimum network cost under the condition that the service chain resource demandand the successful deployment of the safety function are met.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for deploying a security function service chain. Background technique [0002] With the emergence of a large number of new Internet applications such as e-commerce, social networks, and instant messaging, the current Internet architecture based on the TCP / IP protocol has been difficult to meet the rapidly growing business needs, and it is urgent to break through the traditional chimney-style rigid network system. and closed architecture. Under this demand, technologies such as Software Defined Networking (SDN) and Network Function Virtualization (NFV) emerged as the times require, which can realize automated traffic deployment, agile resource pooling, and on-demand dynamic Capabilities such as service provision can reduce the complexity of hardware devices and save costs through the loose coupling mode. Based on the SDN / NFV conceptual architecture, how to reas...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/24
CPCH04L41/0803H04L41/0896H04L41/12H04L41/50
Inventor 于冰石波吴朝雄郭敏刘滋润姜琦
Owner BEIJING INST OF COMP TECH & APPL
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products