Generally, a service request must specify its required virtual network functions (VNFs) and their specific order, which is known as the service function chain (SFC). When mapping SFCs, network providers face many challenges due to the requirements of maintaining the correct order and satisfying other constraints of VNFs. Furthermore, SFC orchestration becomes a more difficult problem when considered in multi-domain networks, because the confidentiality of the topology information of each domain must be considered. In this paper, we study the problem of SFC orchestration across multiple domains. We first use the full mesh aggregation approach to construct an abstracted network to guide the orchestration process, and then propose two efficient methods for SFC partitioning. Based on the SFC partitioning results, we also propose two heuristic algorithms for deploying the sub-chains in multiple domains. Moreover, when the partitioning results cannot be mapped completely, a feedback mechanism is used to repartition the SFC and improve the success ratio of orchestrating the SFC. Finally, to save bandwidth resources, we further improve our heuristic algorithms by migrating the deployment position of VNFs. The simulation results demonstrate that our proposed algorithm achieves better performance compared to existing solutions.

Service Function Chain Orchestration Across Multiple Domains: A Full Mesh Aggregation Approach

Location and trajectory privacy preservation in 5G-Enabled vehicle social network services

Network function virtualization (NFV) is a promising technique aimed at reducing capital expenditures (CAPEX) and operating expenditures (OPEX), and improving the flexibility and scalability of an entire network. In contrast to traditional dispatching, NFV can separate network functions from proprietary infrastructure and gather these functions into a resource pool that can efficiently modify and adjust service function chains (SFCs). However, this emerging technique has some challenges. A major problem is reliability, which involves ensuring the availability of deployed SFCs, namely, the probability of successfully chaining a series of virtual network functions while considering both the feasibility and the specific requirements of clients, because the substrate network remains vulnerable to earthquakes, floods, and other natural disasters. Based on the premise of users’ demands for SFC requirements, we present an ensure reliability cost saving algorithm to reduce the CAPEX and OPEX of telecommunication service providers by reducing the reliability of the SFC deployments. The results of extensive experiments indicate that the proposed algorithms perform efficiently in terms of the blocking ratio, resource consumption, time consumption, and the first block.

A Reliability-Aware Approach for Resource Efficient Virtual Network Function Deployment

At present, there is a considerable increase in the amount of data stored in storage services, along with dramatic evolution of networking techniques. In storage services with huge data, the storage servers may want to reduce the volume of stored data, and the clients may want to monitor the integrity of their data with a low cost, since the cost of the functions related to data storage increase in proportion to the size of the data. To achieve these goals, secure deduplication and integrity auditing delegation techniques have been studied, which can reduce the volume of data stored in storage by eliminating duplicated copies and permit clients to efficiently verify the integrity of stored files by delegating costly operations to a trusted party, respectively. So far many studies have been conducted on each topic, separately, whereas relatively few combined schemes, which support the two functions simultaneously, have been researched. In this paper, we design a combined technique, which performs both secure deduplication of encrypted data and public integrity auditing of data. To support the two functions, the proposed scheme performs challenge-response protocols using the BLS signature-based homomorphic linear authenticator. We utilize a third party auditor for performing public audit, in order to help low-powered clients. The proposed scheme satisfies all the fundamental security requirements. We also propose two variances that provide higher security and better performance.

Efficient Client-Side Deduplication of Encrypted Data With Public Auditing in Cloud Storage

With growing popularity of cloud storage, the number of users of outsourcing data to cloud servers has increased dramatically. On the one hand, the rapidly increasing volume of data in the cloud is accompanied by a lot of data duplication. On the other hand, the cloud server stores only a unique copy of outsourced data in deduplication cloud storage system and the corruption or missing of the unique copy may bring immeasurable loss. Therefore, the file deduplication and integrity auditing are very important and how to securely and efficiently achieve them simultaneously needs to be settled urgently in academia and industry. In this paper, we propose a confidentiality-preserving deduplication cloud storage with public cloud auditing (CPDA). Firstly, our CPDA scheme achieves secure file deduplication on encrypted file, which supports public integrity auditing for the unique copy in the deduplication cloud storage system. Particularly, our CPDA scheme also realizes secure authentication tag deduplication. Secondly, our CPDA scheme utilizes the convergent encryption and random masking techniques to ensure data confidentiality during the file deduplication and integrity auditing process. Thirdly, our scheme not only supports each data owner to independently launch the integrity auditing of their own files, but also supports cloud server to periodically delegate the third party auditor to concurrently handle multiple auditing tasks to ensure the integrity of the outsourced files. Finally, the security of our scheme is formally proved and its performance is confirmed by numerical analyses and simulation experiments.

/pdf/cpda-a-confidentiality-preserving-deduplication-cloud-1jl3ilcx8c.pdf

CPDA: A Confidentiality-Preserving Deduplication Cloud Storage With Public Cloud Auditing

Now a days Cloud Computing is an emerging technology where can utilize the services like SaaS, PaaS and IaaS .In this paper, we show the trustworthiness evaluating and secure deduplication over cloud data utilizing imaginative secure frameworks .Usually cloud framework outsourced information at cloud storage is semi-trusted because of absence of security at cloud storage while putting away or sharing at cloud level because of weak cryptosystem information may be uncover or adjusted by the hackers keeping in mind the end goal to ensure clients information protection and security We propose novel progressed secure framework which empower the cloud framework secured and legitimate utilizing Verifier(TPA) benefit of Cloud Server. Additionally our framework performs data deduplication in a Secured way in requested to enhance the cloud Storage space too data transfer capacity.

N. Sujatha

Papers

Secure Auditing and Deduplicating Data in Cloud