Abstract:Modern network virtualization platforms enable users to specify custom topologies and arbitrary addressing schemes for their virtual networks. These platforms have, however, been targeting the data center of a single provider, which is insufficient to support (critical) applications that need to be deployed across multiple trust domains, while enforcing diverse security requirements. This paper addresses this limitation by presenting a novel solution for the central resource allocation problem of network virtualization -- the virtual network embedding, which aims to find efficient mappings of virtual network requests onto the substrate network. We improve over the state-of-the-art by considering security as a first-class citizen of virtual networks, while enhancing the substrate infrastructure with resources from multiple cloud providers. Our solution enables the definition of flexible policies in three core elements: on the virtual links, where alternative security compromises can be explored (e.g., encryption); on the virtual switches, supporting various degrees of protection and redundancy if necessary; and on the substrate infrastructure, extending it across multiple clouds, including public and private facilities, with their inherently diverse trust levels associated. We propose an optimal solution to this problem formulated as a Mixed Integer Linear Program (MILP). The results of our evaluation give insight into the trade-offs associated with the inclusion of security demands into network virtualization. In particular, they provide evidence that enhancing the user's virtual networks with security does not preclude high acceptance rates and an efficient use of resources, and allows providers to increase their revenues.

Secure Virtual Network Embedding To Mitigate The Risk Of Covert Channel Attacks

Multi-service Virtual Network Embedding in Wireless Network

An Efficient Virtual Network Embedding Algorithm with Delay Constraints

Embedding Algorithm for Virtualizing Content-Centric Networks in a Shared Substrate

A virtual network mapping algorithm based on time

Security Aware Virtual Network Embedding Algorithm Using Information Entropy TOPSIS

Secure Multi-Cloud Virtual Network Embedding

Survivable Virtual Network Embedding with Resource Sharing and Optimization

Efficient joint approaches for location-constrained survivable virtual network embedding

Mutine: A Mutable Virtual Network Embedding with Game-Theoretic Stochastic Routing.

A Covert Channel Using Event Channel State on Xen Hypervisor

Modeling and Mitigating Security Threats in Network Functions Virtualization (NFV)

Virtual Network Embedding by Exploiting Topological Information

Virtual Network Embedding without Explicit Virtual Network Specification

An Approach for Secure-Communication Between XEN Virtual Machines

On the Optimal Approach of Survivable Virtual Network Embedding in Virtualized SDN.

An edge-based approach for virtual network embedding based on the graph edit distance

Topology Based Reliable Virtual Network Embedding from a QoE Perspective

A Load-Balanced Re-Embedding Scheme for Wireless Network Virtualization.

A virtual network embedding scheme with two-stage node mapping based on physical resource migration

Virtual network embedding through topology-aware node ranking