Security SFC Path Selection Using Deep Reinforcement Learning.

Shuangxing Deng,Man Li,Qi Guo,Huachun Zhou
DOI: https://doi.org/10.1007/978-981-99-4430-9_7
2022-01-01
Abstract:Traffic flows can be forwarded through different security service functions based on SDN/NFV technology, which constitutes security service function chaining (SFC). However, the current deployed security service function chaining cannot be dynamically adjusted according to the state of the network environment, and cannot adapt to the rapidly changing security requirements. This paper proposes a security SFC path selection scheme based on deep reinforcement learning. The optimal path of security SFC is dynamically selected in real time using the DQN algorithm, according to the features of the traffic entering the SFC and the detection results of the security service functions. The security capability of the SFC is improved and the latency of the SFC is reduced under the optimal path. We design and implemented a prototype system of this scheme, conduct experiments with DDoS detection security function, and compare the proposed DQN algorithm with Q-learning algorithm. The results show that SFC path selection by DQN algorithm can effectively improve the average DDoS attack detection rate and reduce the latency.
What problem does this paper attempt to address?