1. 西安电子科技大学 杭州研究院,浙江 杭州 311200
2. 西安电子科技大学 通信工程学院, 陕西 西安 710071
3. 中国电子科技集团公司第二十研究所 中国电子科技集团公司数据链技术重点实验室,陕西 西安 710068
[ "李鹏程(1999—),男,西安电子科技大学硕士研究生,E-mail:[email protected]; " ]
[ "宋延博(1994—),男,西安电子科技大学博士研究生,E-mail:[email protected]; " ]
[ "杨春刚(1982—),男,教授,E-mail:[email protected]" ]
李富强(1976—),男,研究员,E-mail:[email protected].
纸质出版日期:2024-1-20,
网络出版日期:2023-8-29,
收稿日期:2022-12-11,
扫 描 看 全 文
李鹏程, 宋延博, 杨春刚, 等. 意图驱动网络服务韧性机制研究[J]. 西安电子科技大学学报, 2024,51(1):60-71.
Pengcheng LI, Yanbo SONG, Chungang YANG, et al. Research on the intent-driven network service resilience mechanism[J]. Journal of Xidian University, 2024,51(1):60-71.
李鹏程, 宋延博, 杨春刚, 等. 意图驱动网络服务韧性机制研究[J]. 西安电子科技大学学报, 2024,51(1):60-71. DOI: 10.19665/j.issn1001-2400.20230311.
Pengcheng LI, Yanbo SONG, Chungang YANG, et al. Research on the intent-driven network service resilience mechanism[J]. Journal of Xidian University, 2024,51(1):60-71. DOI: 10.19665/j.issn1001-2400.20230311.
软件定义网络、网络功能虚拟化和意图驱动网络等新技术的出现
促使网络朝着服务化、定制化和智能化等方向快速发展。然而
规模巨大且复杂的网络形态导致网络管理存在失效
同时网络攻击事件频繁发生。因此
提高网络服务韧性
确保网络服务能够持续保障
变得非常重要。意图驱动网络能实现从用户意图到网络韧性策略生成及其下发的全过程的自动部署
为网络有效应对各类挑战提供更加灵活的手段
极大地改善了网络管理效率
并提高了网络服务韧性。基于此
提出一种意图驱动网络服务韧性控制环路架构及其实现架构。首先
通过将信念-愿望-意图推理逻辑引入韧性推理机制
使网络具有预防功能、防御功能、恢复功能以及适应功能
能够在网络攻击发生前期及时地作出响应
并根据具体环境灵活调整韧性策略
以应对突发的网络攻击
持续保障网络服务。最后
以分布式拒绝服务攻击作为用例
验证所述的意图驱动网络服务韧性机制在保障网络服务韧性方面的有效性。
The emergence of new technologies such as Software-Defined Network
Network Function Virtualization
and Intent-Driven Network have driven the development of networks towards service-oriented
customized
and intelligent directions.However
the large and complex network infrastructure has led to network management failures and frequent security attacks
making it crucial to improve network service resilience and achieve continuous network service assurance.The Intent-Driven Network can automate the entire process of generating and deploying network resilience strategies from user intent.This provides networks with more flexible means to effectively address a wide array of challenges
greatly improving the network management efficiency and enhancing network service resilience
on the basis of which the paper proposes an intent-driven network service resilience control loop architecture and its implementation architecture.By introducing the Belief-Desire-Intention(BDI) reasoning logic into the resilience reasoning mechanism
the network is endowed with preventive
defensive
restorative
and adaptive functionalities
enabling networks to respond promptly in the early stages of network attacks
adjusting resilience strategies flexibly based on specific contexts
countering sudden network assaults
and sustaining network service assurance.Finally
the proposed intent-driven network service resilience mechanism is validated for its effectiveness in ensuring network service resilience using Distributed Denial of Service(DDoS) attacks as a use case.
意图驱动网络网络服务韧性信念-愿望-意图推理服务持续保障
intent-driven networknetwork service resilienceBelief-Desire-Intention reasoningnetwork services continuity assurance
张露露, 杨春刚, 王栋, 等. 意图驱动的云网融合按需编排[J]. 电信科学, 2022, 38(10):107-119.
ZHANG Lulu, YANG Chungang, WANG Dong, et al. Intent-Driven Cloud-Network Convergence On-Demand Orchestration[J]. Telecommunications Science, 2022, 38(10):107-119.
冷常发, 杨春刚, 彭瑶. 意图驱动的自动驾驶网络技术[J]. 西安电子科技大学学报, 2022, 49(4):60-70.
LENG Changfa, YANG Chungang, PENG Yao. Intent-Driven Autonomous Driving Networking Technology[J]. Journal of Xidian University, 2022, 49(4):60-70.
刘益岑, 陈兴凯, 卢昱, 等. 一种软件定义网络的安全服务路径优化构建机制[J]. 西安电子科技大学学报, 2019, 46(1):158-165.
LIU Yicen, CHEN Xingkai, LU Yu, et al. SDN-Based Optimal Security Service Path Construction Mechanism[J]. Journal of Xidian University, 2019, 46(1):158-165.
MI X R, YANG C G, SONG Y B, et al. Matching Game for Intelligent Resource Management in Integrated Satellite-Terrestrial Networks[J]. IEEE Wireless Communications, 2022, 29(6):88-94.
VISHNEVSKY V, KIRICHEK R, ELAGIN V, et al. SDN-Assisted Unmanned Aerial System for Monitoring Sensor Data[C]//Proceedings of the 12th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops(ICUMT 2020). Piscataway:IEEE, 2020:313-317.
SPADARO S, AGRAZ F, PAGES A, et al. Autonomic 5G and Beyond Network Management[C]//Proceedings of the 22th International Conference on Transparent Optical Networks(ICTON 2020). Piscataway:IEEE, 2020:1-4.
YIN K, DU Q, QIN J. Analyse Resilience Risks in Microservice Architecture Systems with Causality Search and Inference Algorithms[J]. International Journal of Web and Grid Services, 2020, 16(2):147-171.
PANG L, YANG C G, CHEN D Y, et al. A Survey on Intent-Driven Networks[J]. IEEE Access, 2020, 8:22862-22873.
SONG Y B, YANG C G, ZHANG J M, et al. Full-Life Cycle Intent-Driven Network Verification:Challenges and Approaches[J/OL].[2022-01-08].https://ieeexplore.org/abstract/document/9970358. https://ieeexplore.org/abstract/document/9970358https://ieeexplore.org/abstract/document/9970358
OUYANG Y, YANG C G, SONG Y B, et al. A Brief Survey and Implementation on Refinement for Intent-Driven Networking[J]. IEEE Network, 2021, 35(6):75-83.
NAJJAR W, GAUDIOT J L. Network Resilience:A Measure of Network Fault Tolerance[J]. IEEE Transactions on Computers, 1990, 39(2):174-181.
HENRY D, RAMIREZ-MARQUEZ J E. Generic Metrics and Quantitative Approaches for System Resilience as a Function of Time[J]. Reliability Engineering & System Safety, 2012, 99:114-122.
STERBENZ J P G, CETINKAYA E K, HAMEED M A, et al. Evaluation of Network Resilience, Survivability and Disruption Tolerance:Analysis, Topology Generation,Simulation,and Experimentation[J]. Telecommunication Systems, 2013, 52(2):705-736.
ROSS R, PILLITTERI V, GRAUBART R, et al.Developing Cyber Resilient Systems:A Systems Security Engineering Approach:800-160 Vol.2[R]. Gaithersburg: National Institute of Standards and Technology(NIST), 2019.
KILLI B P R, RAO S V. Towards Improving Resilience of Controller Placement with Minimum Backup Capacity in Software Defined Networks[J]. Computer Networks, 2019, 149:102-114.
AZAB M, ERAGWY R R, GHOURAB E M, et al. Towards Blockchain-Based Multi-Controller Managed Switching for Trustworthy SDN Operation[C]// Proceedings of the 10th Annual Information Technology,Electronics and Mobile Communication Conference(IEMCON 2019). Piscataway:IEEE, 2019:991-998.
GU Z, ZHANG J, JI Y. Topology Optimizing in Fso-Based Uavs Relay Networks for Resilience Enhancement[J]. Mobile Networks and Applications, 2020, 25(1):350-362.
BARBOSA F, DE SOUSA A, AGRA A. Topology Design of Transparent Optical Networks Resilient to Multiple Node Failures[C]// Proceedings of the 10th International Workshop on Resilient Networks Design and Modeling(RNDM 2018). Piscataway:IEEE, 2018:1-8.
TAPOLCAI J, CHOLDA P, CINKLER T, et al. Quality of Resilience(QoR):NOBEL Approach to The Multi-Service Resilience Characterization[C]// Proceedings of the 2th International Conference on Broadband Networks(BroadNets 2005).Piscataway:IEEE, 2005:1328-1337.
LI W G, LI Y, TAN Y, et al. Maximizing Network Resilience Against Malicious Attacks[J]. Scientific Reports, 2019, 9(1):2261.
SMITH P, HUTCHISON D, STERBENZ J P G, et al. Network Resilience:A Systematic Approach[J]. IEEE Communications Magazine, 2011, 49(7):88-97.
SCHAEFFER-FILHO A, SMITH P, MAUTHE A, et al. Network Resilience with Reusable Management Patterns[J]. IEEE Communications Magazine, 2014, 52(7):105-115.
NUNES I, SCHARDONG F, SCHAEFFER-FILHO A. BDI2DoS:An Application Using Collaborating BDI Agents to Combat DDoS Attacks[J]. Journal of Network and Computer Applications, 2017, 84:14-24.
CHENR Z, RUAN F M, LI Y D, et al.A Simple DDoS Defense Method Based SDN[C]//Proceedings of the 15th International Conference on Anti-Counterfeiting,Security,and Identification(ASID 2021).Piscataway:IEEE, 2021:88-92.
0
浏览量
7
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构