SICS：安全的云内服务功能链
SICS: Secure In-Cloud Service Function Chaining
摘要：
越来越多的企业将其网络功能外包给云，以降低成本和易于管理。然而，网络功能外包给企业的隐私带来了威胁，因为云能够访问云中网络功能的流量和规则。当前用于安全网络功能外包的工具要么招致大的性能开销，要么不支持实时更新。在本文中，我们提出了SICS，一个安全的服务功能链外包框架。SICS加密每个数据包报头，并使用标签进行云内规则匹配，这使云能够以最小的报头信息泄漏正确执行其功能。评估结果表明，SICS实现了更高的吞吐量，更快的建设和更新速度，以及更低的资源开销在企业和云端，与现有的解决方案相比。
英文摘要：
There is an increasing trend that enterprises outsource their network functions to the cloud for lower cost and ease of management. However, network function outsourcing brings threats to the privacy of enterprises since the cloud is able to access the traffic and rules of in-cloud network functions. Current tools for secure network function outsourcing either incur large performance overhead or do not support real-time updates. In this paper, we present SICS, a secure service function chain outsourcing framework. SICS encrypts each packet header and use a label for in-cloud rule matching, which enables the cloud to perform its functionalities correctly with minimum header information leakage. Evaluation results show that SICS achieves higher throughput, faster construction and update speed, and lower resource overhead at both enterprise and cloud sides, compared to existing solutions.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
