意图驱动网络服务韧性机制研究

Research on the intent-driven network service resilience mechanism

软件定义网络、网络功能虚拟化和意图驱动网络等新技术的出现,促使网络朝着服务化、定制化和智能化等方向快速发展。然而,规模巨大且复杂的网络形态导致网络管理存在失效,同时网络攻击事件频繁发生。因此,提高网络服务韧性,确保网络服务能够持续保障,变得非常重要。意图驱动网络能实现从用户意图到网络韧性策略生成及其下发的全过程的自动部署,为网络有效应对各类挑战提供更加灵活的手段,极大地改善了网络管理效率,并提高了网络服务韧性。基于此,提出一种意图驱动网络服务韧性控制环路架构及其实现架构。首先,通过将信念-愿望-意图推理逻辑引入韧性推理机制,使网络具有预防功能、防御功能、恢复功能以及适应功能,能够在网络攻击发生前期及时地作出响应,并根据具体环境灵活调整韧性策略,以应对突发的网络攻击,持续保障网络服务。最后,以分布式拒绝服务攻击作为用例,验证所述的意图驱动网络服务韧性机制在保障网络服务韧性方面的有效性。

The emergence of new technologies such as Software-Defined Network,Network Function Virtualization,and Intent-Driven Network have driven the development of networks towards service-oriented,customized,and intelligent directions.However,the large and complex network infrastructure has led to network management failures and frequent security attacks,making it crucial to improve network service resilience and achieve continuous network service assurance.The Intent-Driven Network can automate the entire process of generating and deploying network resilience strategies from user intent.This provides networks with more flexible means to effectively address a wide array of challenges,greatly improving the network management efficiency and enhancing network service resilience,on the basis of which the paper proposes an intent-driven network service resilience control loop architecture and its implementation architecture.By introducing the Belief-Desire-Intention(BDI)reasoning logic into the resilience reasoning mechanism,the network is endowed with preventive,defensive,restorative,and adaptive functionalities,enabling networks to respond promptly in the early stages of network attacks,adjusting resilience strategies flexibly based on specific contexts,countering sudden network assaults,and sustaining network service assurance.Finally,the proposed intent-driven network service resilience mechanism is validated for its effectiveness in ensuring network service resilience using Distributed Denial of Service(DDoS)attacks as a use case.