Abstract:Security service function chaining (SFC) based on software-defined networking (SDN) and network function virtualization (NFV) technology allows traffic to be forwarded sequentially among different security service functions to achieve a combination of security functions. Security SFC can be deployed according to requirements, but the current SFC is not flexible enough and lacks an effective feedback mechanism. The SFC is not traffic aware and the changes of traffic may cause the previously deployed security SFC to be invalid. How to establish a closed-loop mechanism to enhance the adaptive capability of the security SFC to malicious traffic has become an important issue. Our contribution is threefold. First, we propose a secure SFC path selection framework. The framework can accept the feedback results of traffic and security service functions in SFC, and dynamically select the optimal path for SFC based on the feedback results. It also realizes the automatic deployment of paths, forming a complete closed loop. Second, we expand the protocol of SFC to realize the security SFC with branching path, which improve flexibility of security SFC. Third, we propose a deep reinforcement learning-based dynamic path selection method for security SFC. It infers the optimal branching path by analyzing feedback from the security SFC. We have experimented with Distributed Denial of Service (DDoS) attack detection modules as security service functions. Experimental results show that our proposed method can dynamically select the optimal branching path for a security SFC based on traffic features and the state of the SFC. And it improves the accuracy of the overall malicious traffic detection of the security SFC and significantly reduces the latency and overall load of the SFC.

Dynamic Security SFC Branching Path Selection Using Deep Reinforcement Learning

Security SFC Path Selection Using Deep Reinforcement Learning.

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Scheduling Reconfigurable Service Function Chain

A Path Selection Scheme for Detecting Malicious Behavior Based on Deep Reinforcement Learning in SDN/NFV-Enabled Network

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

A Confidence-Aware Machine Learning Framework for Dynamic Security Assessment

Application-aware and Dynamic Security Function Chaining for Mobile Networks

Automatic Selection of Security Service Function Chaining Using Reinforcement Learning

Dynamic Service Function Chain Deployment and Readjustment Method Based on Deep Reinforcement Learning

A Deep Reinforcement Learning-Based Approach for Adaptive SFC Deployment in Multi-Domain Networks

QLSFC: an Intelligent Security Function Chain with Q-Learning in SDN/NFV Network

QLSFC: An Intelligent Security Function Chain with Q-Learning in SDN/NFV Network.

Cross-Security Domain Dynamic Orchestration Algorithm of Network Security Functions

Sdn/Nfv-Based Security Service Function Tree For Cloud

Research and Implementation of Network Security Cooperative Defense System

UAV Dynamic Service Function Chains Deployment Based on Security Considerations: A Reinforcement Learning Method

To Deploy New or to Deploy More?: an Online SFC Deployment Scheme at Network Edge

AI-Based Security Parallel Path Selection Mechanism

To Deploy New or to Deploy More?: an Online SFC Deployment Scheme at Network Edge.

Two-Phase Virtual Network Function Selection and Chaining Algorithm Based on Deep Learning in SDN/NFV-Enabled Networks