基于信任感知网络切片的虚拟化网络结构端到端服务
Towards a Trust Aware Network Slice based End to End Services for Virtualised Infrastructures
摘要：
预计5G等未来通信网络将支持针对具有不同要求的几个垂直市场的端到端服务交付。网络切片是一个关键的构造，用于提供在公共虚拟化基础设施上运行的端到端逻辑虚拟网络，这些网络相互隔离。在相同的5G基础设施上运行不同的网络切片会在安全性和信任方面带来一些挑战。本文讨论了网络切片信任的基本问题。提出了一种信任模型和基于属性的信任证明机制，可用于评估组成网络切片的虚拟网络功能的信任。所提出的模型有助于确定虚拟网络功能的信任度以及虚拟平台（在引导和运行时间）应满足的属性，这些网络功能部署在虚拟平台上以使其可信。我们提出了一种基于逻辑的语言，定义了简单的规则，规范的属性和条件下，这些属性进行评估，以满足可信的虚拟化平台。提出的信任模型和机制，使服务提供商，以确定网络服务的可信度以及用户开发值得信赖的应用程序。.
英文摘要：
Future communication networks such as 5G are expected to support end-to-end delivery of services for several vertical markets with diverging requirements. Network slicing is a key construct that is used to provide end to end logical virtual networks running on a common virtualised infrastructure, which are mutually isolated. Having different network slices operating over the same 5G infrastructure creates several challenges in security and trust. This paper addresses the fundamental issue of trust of a network slice. It presents a trust model and property-based trust attestation mechanisms which can be used to evaluate the trust of the virtual network functions that compose the network slice. The proposed model helps to determine the trust of the virtual network functions as well as the properties that should be satisfied by the virtual platforms (both at boot and run time) on which these network functions are deployed for them to be trusted. We present a logic-based language that defines simple rules for the specification of properties and the conditions under which these properties are evaluated to be satisfied for trusted virtualised platforms. The proposed trust model and mechanisms enable the service providers to determine the trustworthiness of the network services as well as the users to develop trustworthy applications. .
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
