Title
Towards a fully automated and optimized network security functions orchestration
Abstract
Automated policy-based network security management tools represent a new research frontier to be fully explored, so as to reduce the number of human errors due to a manual and suboptimal configuration of security services. Moreover, the agility that an automated tool would require can be provided by the most recent networking technologies, Network Functions Virtualization and Software-Defined Networking, which move the network management from the hardware level to the software. However, even though a Security Automation approach is nowadays feasible and would bring several benefits in facing cybersecurity attacks, pending problems are that currently only a limited number of automatic management tools have been developed and that they do not have a direct integration with cloud orchestrators, consequently requiring human interaction. Given these considerations, in this paper we propose a novel framework, whose goal is to automatically and optimally allocate and conFigure security functions in a virtualized network service in a formal and verified way, directly integrated in cloud orchestrators. We validated this contribution through an implementation that is able to cooperate with two well-known orchestrators, that are Open Baton and Kubernetes.
Year
DOI
Venue
2019
10.1109/CCCS.2019.8888130
2019 4th International Conference on Computing, Communications and Security (ICCCS)
Keywords
Field
DocType
network security optimization,network security orchestration,cloud security,network functions virtualization
Network service,Computer science,Network security,Automation,Software,Cloud computing security,Network management,Orchestration (computing),Distributed computing,Cloud computing
Conference
ISBN
Citations 
PageRank 
978-1-7281-0876-6
0
0.34
References 
Authors
20
5
Name
Order
Citations
PageRank
Daniele Bringhenti132.08
Guido Marchetto28620.64
Riccardo Sisto355656.79
Fulvio Valenza45411.17
Jalolliddin Yusupov532.07