Security Resource Throughput-Based Mapping Algorithm for Guaranteeing Quality-of-Service of Traffic 


Vol. 46,  No. 10, pp. 1632-1645, Oct.  2021
10.7840/kics.2021.46.10.1632


PDF
  Abstract

Data networks could be threatened with data theft or service breakdown caused by intrusion from malicious users. To protect the networks from these threats, security network functions such as firewalls and intrusion detection systems are utilized. When the security network functions provide security services, it is needed to satisfy the quality-of-service (QoS) requirements of the traffic. If excessive real-time data traffic is configured to be served by a specific network function resource, the processing time may grow exponentially and the system cannot satisfy the QoS requirements of the traffic. This paper considers a security resource pool that is composed of dedicated standalone security systems and virtualized network functions (VNFs) for providing security function services to traffic with different QoS requirements. We model the time delay in an SR as an M/D/1 queue model and formulate the allocation problem as an optimization problem. The optimization problem is represented as a multiple knapsack problem and is solved using a greed-based algorithm. The simulation results indicate that the proposed method achieves a high SR process capacity with low computational complexity in a real-time network environment.

  Statistics
Cumulative Counts from November, 2022
Multiple requests among the same browser session are counted as one view. If you mouse over a chart, the values of data points will be shown.


  Cite this article

[IEEE Style]

G. Sur, J. Bae, S. Y. Ryu, J. Kim, H. Lim, "Security Resource Throughput-Based Mapping Algorithm for Guaranteeing Quality-of-Service of Traffic," The Journal of Korean Institute of Communications and Information Sciences, vol. 46, no. 10, pp. 1632-1645, 2021. DOI: 10.7840/kics.2021.46.10.1632.

[ACM Style]

Giwon Sur, Jaewon Bae, Shun Yuel Ryu, JongWon Kim, and Hyuk Lim. 2021. Security Resource Throughput-Based Mapping Algorithm for Guaranteeing Quality-of-Service of Traffic. The Journal of Korean Institute of Communications and Information Sciences, 46, 10, (2021), 1632-1645. DOI: 10.7840/kics.2021.46.10.1632.

[KICS Style]

Giwon Sur, Jaewon Bae, Shun Yuel Ryu, JongWon Kim, Hyuk Lim, "Security Resource Throughput-Based Mapping Algorithm for Guaranteeing Quality-of-Service of Traffic," The Journal of Korean Institute of Communications and Information Sciences, vol. 46, no. 10, pp. 1632-1645, 10. 2021. (https://doi.org/10.7840/kics.2021.46.10.1632)