考虑安全的边—云协同计算卸载成本优化

doi:10.3969/j.issn.1671-1122.2024.07.012

摘要/Abstract

摘要：

为满足边缘计算安全高效的计算卸载需求，计算卸载方案不仅要考虑对正常计算任务卸载的成本优化，还要考虑防御DDoS攻击所产生的安全成本，在多用户、多任务边缘计算系统中，文章提出考虑安全的边—云协同计算卸载方案（E-CCOCS）。首先，对计算卸载过程进行建模，利用安全模型对恶意卸载流量进行检测并根据检测结果生成所有终端设备的信任度，将时延、能耗和安全成本的联合卸载成本优化问题构建为一个混合整数非线性规划问题。其次，针对终端设备—边缘、边缘—云的协同卸载场景，提出双层改进粒子群优化算法（DLI-PSO）对卸载成本优化问题进行求解。仿真实验结果表明，DLI-PSO算法的收敛性优于对比算法，E-CCOCS的成本低于对比方案的成本，可有效应对DDoS攻击。

关键词: 边—云协同, 计算卸载, 安全成本, 粒子群算法, DDoS攻击

Abstract:

To meet the requirements for secure and efficient computing offloading in edge computing, the computing offloading scheme should not only consider the cost optimization of normal computation task offloading, but also take into account the security costs arising from defending against DDoS attacks. In a multi-user, multi-task edge computing system, we proposed an edge-cloud collaborative computing offloading considering security (E-CCOCS). First, the computing offloading process was modeled, and a security model was used to detect malicious offloading traffic and generated trust values for all terminal devices based on the detection results. The joint offloading cost optimization problem of time delay, energy consumption, and security cost was formulated as a mixed-integer nonlinear programming problem. Second, for the cooperative offloading scenario of terminal devices-edge and edge-cloud, a double-layer improved particle swarm optimization algorithm (DLI-PSO) was proposed to solve the offloading cost optimization problem. Simulation results show that the convergence of the DLI-PSO algorithm is superior to the compared algorithms, and the cost of the E-CCOCS secure offloading scheme is lower than the cost of the compared schemes, effectively addressing DDoS attacks.

Key words: edge-cloud collaboration, computing offloading, security cost, particle swarm optimization, DDoS attack

中图分类号:

TP309

申秀雨, 姬伟峰. 考虑安全的边—云协同计算卸载成本优化[J]. 信息网络安全, 2024, 24(7): 1110-1121.

SHEN Xiuyu, JI Weifeng. Optimization of Cost of Edge-Cloud Collaborative Computing Offloading Considering Security[J]. Netinfo Security, 2024, 24(7): 1110-1121.

图/表 7

图1

表1

图2

图3

图4

图5

图6

参考文献 24

[1]	LI Yiyang, FANG Yuan, QIU Ling. Joint Computation Offloading and Communication Design for Secure UAV-Enabled MEC Systems[C]// IEEE. 2021 IEEE Wireless Communications and Networking Conference (WCNC). New York: IEEE, 2021: 1-6.
[2]	SHI Weisong, SUN Hui, CAO Jie, et al. Edge Computing-An Emerging Computing Model for the Internet of Everything Era[J]. Journal of Computer Research and Development, 2017, 54(5): 907-924.
	施巍松, 孙辉, 曹杰, 等. 边缘计算:万物互联时代新型计算模型[J]. 计算机研究与发展, 2017, 54(5): 907-924.
[3]	ZHANG Bingjie, YANG Yanhong, CAO Shaozhong. Review of Computing Offloading Schemes for Multi-Access Edge Computing[J]. Journal of Frontiers of Computer Science and Technology, 2023, 17(9): 2030-2046.
	张冰洁, 杨彦红, 曹少中. 面向多接入边缘计算的计算卸载方案研究综述[J]. 计算机科学与探索, 2023, 17(9): 2030-2046. doi: 10.3778/j.issn.1673-9418.2301068
[4]	ZHANG Yilin, LIANG Yuzhu, YIN Mujun, et al. Survey on the Methods of Computation Offloading in Mobile Edge Computing[J]. Chinese Journal of Computers, 2021, 44(12): 2406-2430.
	张依琳, 梁玉珠, 尹沐君, 等. 移动边缘计算中计算卸载方案研究综述[J]. 计算机学报, 2021, 44(12): 2406-2430.
[5]	XIE Renchao, LIAN Xiaofei, JIA Qingmin, et al. Survey on Computation Offloading in Mobile Edge Computing[J]. Journal on Communications, 2018, 39(11): 138-155. doi: 10.11959/j.issn.1000-436x.2018215
	谢人超, 廉晓飞, 贾庆民, 等. 移动边缘计算卸载技术综述[J]. 通信学报, 2018, 39(11): 138-155. doi: 10.11959/j.issn.1000-436x.2018215
[6]	ZHU Sifeng, ZHAO Mingyang, CHAI Zhengyi, et al. Computing Offloading Scheme Based on Particle Swarm Optimization Algorithm in Edge Computing Scene[J]. Journal of Jilin University (Engineering and Technology Edition), 2022, 52(11): 2698-2705.
	朱思峰, 赵明阳, 柴争义, 等. 边缘计算场景中基于粒子群优化算法的计算卸载[J]. 吉林大学学报(工学版), 2022, 52(11): 2698-2705.
[7]	ZHOU Tianqing, ZENG Xinliang, HU Haiqin. Computation Offloading Cost Optimization Based on Hybrid Particle Swarm Optimization Algorithm[J]. Journal of Electronics & Information Technology, 2022, 44(9): 3065-3074.
	周天清, 曾新亮, 胡海琴. 基于混合粒子群算法的计算卸载成本优化[J]. 电子与信息学报, 2022, 44(9): 3065-3074.
[8]	PAN Meini, LI Zhihua. Multi-User Computation Offloading Algorithm for Mobile Edge Computing[C]// ISAC. 2021 2nd International Conference on Electronics, Communications and Information Technology (CECIT). New York: IEEE, 2021: 771-776.
[9]	CHEN Lu, TANG Hongbo, YOU Wei, et al. Research on Security Defense of Mobile Edge Computing[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 130-142.
[10]	HE Qiang, WANG Cheng, CUI Guangming, et al. A Game-Theoretical Approach for Mitigating Edge DDoS Attack[J]. IEEE Transactions on Dependable and Secure Computing, 2022, 19(4): 2333-2348.
[11]	LIAN Xiaofei, XIE Renchao, HUANG Tao. Security-Based Computation Offloading Scheme in Edge Computing Network[J]. ZTE Technology Journal, 2019, 25(2): 41-46, 56.
	廉晓飞, 谢人超, 黄韬. 基于安全保障的边缘计算卸载方案[J]. 中兴通讯技术, 2019, 25(2): 41-46, 56.
[12]	ZHOU Yi, YEOH P L, PAN Cunhua, et al. Offloading Optimization for Low-Latency Secure Mobile Edge Computing Systems[J]. IEEE Wireless Communication Letters, 2019, 9(4): 480-484.
[13]	PHAM Q V, NGUYEN H T, HAN Zhu, et al. Coalitional Games for Computation Offloading in NOMA-Enabled Multi-Access Edge Computing[J]. IEEE Transactions on Vehicular Technology, 2020, 69(2): 1982-1993.
[14]	ZHOU Tianqing, HU Haiqin, ZENG Xinliang. Cooperative Computation Offloading and Resource Management Based on Improved Genetic Algorithm in NOMA-MEC Systems[J]. Journal of Electronics & Information Technology, 2022, 44(9): 3014-3023.
	周天清, 胡海琴, 曾新亮. NOMA-MEC系统中基于改进遗传算法的协作式计算卸载与资源管理[J]. 电子与信息学报, 2022, 44(9): 3014-3023.
[15]	LI Shun, GE Haibo, LIU Linhuan, et al. Collaborative Computing Offloading Strategy in Mobile Edge Computing[J]. Computer Engineering and Applications, 2022, 58(21): 83-90. doi: 10.3778/j.issn.1002-8331.2201-0015
	李顺, 葛海波, 刘林欢, 等. 移动边缘计算中的协同计算卸载策略[J]. 计算机工程与应用, 2022, 58(21): 83-90. doi: 10.3778/j.issn.1002-8331.2201-0015
[16]	DAI Yueyue, XU Du, MAHARJAN S, et al. Joint Computation Offloading and User Association in Multi-Task Mobile Edge Computing[J]. IEEE Trans on Vehicular Technology, 2018, 67(12): 12313-12325.
[17]	YOU Jing, SHANGGUAN Jinglun, XU Shoukun, et al. Distributed Dynamic Trust Management Model Based on Trust Reliability[J]. Journal of Software, 2017, 28(9): 2354-2369.
	游静, 上官经伦, 徐守坤, 等. 考虑信任可靠度的分布式动态信任管理模型[J]. 软件学报, 2017, 28(9): 2354-2369.
[18]	SHEN Xiuyu, JI Weifeng, LI Yingqi, et al. TCA1C DDoS Detection Model for Edge Computing[J]. Computer Engineering, 2024, 50(1): 198-205. doi: 10.19678/j.issn.1000-3428.0067572
	申秀雨, 姬伟峰, 李映岐, 等. 面向边缘计算的TCA1C DDoS检测模型[J]. 计算机工程, 2024, 50(1): 198-205. doi: 10.19678/j.issn.1000-3428.0067572
[19]	ZHAO Guosheng, WANG Tiantian, WANG Jian. A Dynamic Trust Evaluation Model for Edge Devices[J]. Computer Engineering & Science, 2021, 43(9): 1574-1583.
	赵国生, 王甜甜, 王健. 一种边缘设备动态信任度的评估模型[J]. 计算机工程与科学, 2021, 43(9): 1574-1583.
[20]	LI Xingqi, GAO Xiaohong. Study on Dimensionless Methods for Data Obeying Different Distributions[J]. Statistics & Decision, 2022, 38(10): 31-36.
	李兴奇, 高晓红. 服从不同分布数据的无量纲化方法研究[J]. 统计与决策, 2022, 38(10): 31-36.
[21]	GUO Fengxian, ZHANG Heli, JI Hong, et al. An Efficient Computation Offloading Management Scheme in the Densely Deployed Small Cell Networks with Mobile Edge Computing[J]. IEEE/ACM Transactions on Networking, 2018, 26(6): 2651-2664.
[22]	SHI Yuhui, EBERHART R. A Modified Particle Swarm Optimizer[C]// IEEE. 1998 IEEE International Conference on Evolutionary Computation Proceedings. New York: IEEE, 1998: 69-73.
[23]	WU Xuewen, LIAO Jingxian. Game-Based Resource Allocation and Task Offloading Scheme in Collaborative Cloud-Edge Computing System[J]. Journal of System Simulation, 2022, 34(7): 1468-1481. doi: 10.16182/j.issn1004731x.joss.21-0077
	吴学文, 廖婧贤. 云边协同系统中基于博弈论的资源分配与任务卸载方案[J]. 系统仿真学报, 2022, 34(7): 1468-1481. doi: 10.16182/j.issn1004731x.joss.21-0077
[24]	ZHAO Xiaolin, ZHAO Bin, ZHAO Jingjing, et al. Research on Network Security Measurement Method Based on Attack Identification[J]. Netinfo Security, 2021, 21(11): 17-27.
	赵小林, 赵斌, 赵晶晶, 等. 基于攻击识别的网络安全度量方法研究[J]. 信息网络安全, 2021, 21(11): 17-27.

参数	值	参数	值
边缘网络带宽	20 MHz	计算任务最大容忍时延$T$	3~8 s
子信道带宽$w$	15 kHz	计算任务数据量	10~100 KB
终端设备发射功率${{p}_{i}}$	23 dBm	任务所需计算量	200~500 cycles/bit
边缘服务器的传输功率${{p}_{ed}}$	1 W	噪声功率${{\sigma }^{2}}$	-100 dBm
种群大小sizepop	20	数据包大小$L$	56,64,128,512,1500,3000
时延、能耗权重系数$\psi $	0.3	安全成本权重系数$\phi $	0.4