Abstract:

The emergence of new technologies such as Software-Defined Network,Network Function Virtualization,and Intent-Driven Network have driven the development of networks towards service-oriented,customized,and intelligent directions.However,the large and complex network infrastructure has led to network management failures and frequent security attacks,making it crucial to improve network service resilience and achieve continuous network service assurance.The Intent-Driven Network can automate the entire process of generating and deploying network resilience strategies from user intent.This provides networks with more flexible means to effectively address a wide array of challenges,greatly improving the network management efficiency and enhancing network service resilience,on the basis of which the paper proposes an intent-driven network service resilience control loop architecture and its implementation architecture.By introducing the Belief-Desire-Intention(BDI) reasoning logic into the resilience reasoning mechanism,the network is endowed with preventive,defensive,restorative,and adaptive functionalities,enabling networks to respond promptly in the early stages of network attacks,adjusting resilience strategies flexibly based on specific contexts,countering sudden network assaults,and sustaining network service assurance.Finally,the proposed intent-driven network service resilience mechanism is validated for its effectiveness in ensuring network service resilience using Distributed Denial of Service(DDoS) attacks as a use case.

Key words: intent-driven network, network service resilience, Belief-Desire-Intention reasoning, network services continuity assurance