Dynamic trust-based service function chain deployment method for disrupting attack chains
Regular Papers|Updated:2026-01-12
|
Dynamic trust-based service function chain deployment method for disrupting attack chains
面向破坏攻击路径的服务功能链动态信任部署方法
“In the field of cloud security, enhancing service function chain (SFC) security by composing virtual network functions (VNFs) and allocating resources considering their security attributes is crucial. Expert proposed an innovative hierarchical trust model to assess the differentiated trustworthiness among network entities caused by vulnerability correlation. Based on trustworthiness assessment, both virtual trust of VNF combinations at the SFC composition stage and physical trust of physical node (PN) selections at the SFC placement stage are globally considered to disrupt the attack chains in SFCs as much as possible. The security-aware and cost-efficient SFC composition and placement (SCSCP) problem is formulated as an integer linear programming (ILP) problem, which is NP-hard. The joint trust and cost global optimization (JTCGO) algorithm is proposed to dynamically update the trustworthiness and globally find the SFC deployment solutions including the VNF combination schemes and PN selection schemes. Simulation results demonstrate that our proposed algorithm can provide the optimal SFC deployment solutions for requests and can guarantee the SFC trustworthiness at a controllable cost, thereby protecting SFCs from network attacks in complex security environments.”
Frontiers of Information Technology & Electronic EngineeringVol. 26, Issue 12, Pages: 2550-2568(2025)
Affiliations:
1.Information Technology Institute, PLA Information Engineering University, Zhengzhou 450002, China
2.Purple Mountain Laboratories, Nanjing 211111, China
Deqiang ZHOU, Xinsheng JI, Wei YOU, et al. Dynamic trust-based service function chain deployment method for disrupting attack chains[J]. Frontiers of Information Technology & Electronic Engineering, 2025, 26(12): 2550-2568.
DOI:
Deqiang ZHOU, Xinsheng JI, Wei YOU, et al. Dynamic trust-based service function chain deployment method for disrupting attack chains[J]. Frontiers of Information Technology & Electronic Engineering, 2025, 26(12): 2550-2568. DOI: 10.1631/FITEE.2500218.
Dynamic trust-based service function chain deployment method for disrupting attack chains