Enhancing Security by Using GIFT and ECC Encryption Method in Multi-Tenant Datacenters
Source abstract
Abstract
Data security and user privacy have become crucial elements in multi-tenant data centers. Various traffic types in the multi-tenant data center in the cloud environment have their characteristics and requirements. In the data center network (DCN), short and long flows are sensitive to low latency and high throughput, respectively. The traditional security processing approaches, however, neglect these characteristics and requirements. This paper proposes a fine-grained security enhancement mechanism (SEM) to solve the problem of heterogeneous traffic and reduce the traffic completion time (FCT) of short flows while ensuring the security of multi-tenant traffic transmission. Specifically, for short flows in DCN, the lightweight GIFT encryption method is utilized. For Intra-DCN long flows and Inter-DCN traffic, the asymmetric elliptic curve encryption algorithm (ECC) is utilized. The NS-3 simulation results demonstrate that SEM dramatically reduces the FCT of short flows by 70% compared to several conventional encryption techniques, effectively enhancing the security and anti-attack of traffic transmission between DCNs in cloud computing environments. Additionally, SEM performs better than other encryption methods under high load and in large-scale cloud environments.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Software-Defined Networks and 5G · Security and Verification in Computing · Network Security and Intrusion Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (40)
Show source-provided references
1. Cloud data services: Workloads, achitectures and multi-tenancy10.1561/1900000060 ↗
2. SoK: Secure FPGA multi-tenancy in the cloud: Challenges and opportunities
3. An asynchronous clustering and mobile data gathering schema based on timer mechanism in wireless sensor networks10.32604/cmc.2019.05450 ↗
4. Encryption and authentication of data using the IPSEC protocol
5. Improved lightweight encryption algorithm based on optimized S-box
6. Bogdanov · Cryptographic Hardware and Embedded Systems—CHES 2007 · 2007 · 4727 · 45010.1007/978-3-540-74735-2_31 ↗
7. Banik · Cryptographic Hardware and Embedded Systems—CHES 2017 · 2017 · 10529 · 32110.1007/978-3-319-66787-4_16 ↗
8. A load balancing algorithm for the data centers to optimize cloud computing applications10.1109/ACCESS.2021.3065308 ↗
9. Distributed multi-tenant RAN slicing in 5G networks10.1007/s11276-022-03023-8 ↗
10. CAPS: Coding-based adaptive packet spraying to reduce flow completion time in datacenter10.1109/TNET.2019.2945863 ↗
11. Application domain-based overview of IoT network traffic characteristics10.1145/3399669 ↗
12. Intelligent ubiquitous network accessibility for wireless-powered MEC in UAV-assisted B5G10.1109/TNSE.2020.3029048 ↗
13. RPO: Receiver-driven transport protocol using opportunistic transmission in data center
14. Lightweight elliptic curve cryptography accelerator for internet of things applications10.1016/j.adhoc.2020.102159 ↗
15. Survey on wireless network security10.1007/s11831-021-09631-5 ↗
16. Lightweight encryption technique to enhance medical image security on internet of medical things applications10.1109/ACCESS.2021.3061710 ↗
17. Medical data security for healthcare applications using hybrid lightweight encryption and swarm optimization algorithm10.1007/s11277-020-07229-x ↗
18. Multiple strategies differential privacy on sparse tensor factorization for network traffic analysis in 5G10.1109/TII.2021.3082576 ↗
19. Security and privacy protection in cloud computing: Discussions and challenges10.1016/j.jnca.2020.102642 ↗
20. Osvik · Cryptographers’ Track at the RSA Conf. CT-RSA 2006: Topics in Cryptology · 2006 · 3860 · 110.1007/11605805_1 ↗
21. Secure and efficient text encryption using elliptic curve cryptography10.1007/978-981-16-6616-2_51 ↗
22. Effect of network topology and node centrality on trading
23. P. Yu, Y. Shi, L. Wang, S. Ke and M. Yin, A Method for Optimizing Communication Network Topology Based on Genetic Algorithm. vol. 307, Singapore: Springer Nature Singapore, pp. 30–40, 2021.10.1007/978-981-19-3486-5_4 ↗
24. O. N. Akande, O. C. Abikoye, A. A. Kayode, O. T. Aro and O. R. Ogundokun, “A dynamic round triple data encryption standard cryptographic technique for data security,” vol. 12254, Cham: Springer International Publishing, pp. 487–499, 2020.10.1007/978-3-030-58817-5_36 ↗
25. C. Cid, S. Murphy and M. J. B. Robshaw, “Small scale variants of the AES,” vol. 3557, Berlin, Heidelberg: Springer Berlin Heidelberg, pp. 145–162, 2005.10.1007/11502760_10 ↗
26. Wheeler · Fast Software Encryption. LNCS · 1995 · 1008 · 36310.1007/3-540-60590-8_29 ↗
27. Scheduling mix-flows in commodity datacenters with karuna
28. Network traffic characteristics of data centers in the wild
29. Koç · Partially Homomorphic Encryption · 2021 · 3710.1007/978-3-030-87629-6_3 ↗
30. Adjusting switching granularity of load balancing for heterogeneous datacenter traffic10.1109/TNET.2021.3088276 ↗
31. APS: Adaptive packet spraying to isolate mix-flows in datacenter network10.1109/TCC.2020.2985037 ↗
32. Dynamic adaptive marking strategy based on DCTCP in datacenter networks
33. Green multi-stage upgrade for bundled-links SDN/OSPF-ECMP networks
34. SIT: A lightweight encryption algorithm for secure internet of things10.14569/IJACSA.2017.080151 ↗
35. Speeding up the internet of things: LEAIoT: A lightweight encryption algorithm toward low-latency communication for the internet of things10.1109/MCE.2018.2851722 ↗
36. Deep and machine learning approaches for anomaly-based intrusion detection of imbalanced network traffic10.1109/LSENS.2018.2879990 ↗
37. Research on CNN-based malicious traffic identification method
38. A multi-tenant access control method based on environmental attributes and security labels
39. Adeniyi · Blockchain Applications in the Smart Era · 2022 · 6510.1007/978-3-030-89546-4_4 ↗
40. Enhancing multi-tenancy security in the cloud computing using hybrid ECC-based data encryption approach10.1049/iet-com.2020.0255 ↗