A novel approach for integrating security policy enforcement with dynamic network virtualization. Basile, C., Lioy, A., Pitscheider, C., Valenza, F., & Vallini, M. In Proceedings of the 1st IEEE Conference on Network Softwarization (NetSoft 2015), pages 1–5, 2015. IEEE. ![A novel approach for integrating security policy enforcement with dynamic network virtualization [pdf]](https://bibbase.org/img/filetypes/pdf.svg "pdf")
Paper doi abstract bibtex 19 downloads Network function virtualization (NFV) is a new networking paradigm that virtualizes single network functions. NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user's security requirements. This paper presents a first approach towards the integration of network and security policy management into the NFV framework. By adding to the NFV architecture a new software component, the Policy Manager, we provide NFV with an easy and effective way for users to specify their security requirements and a process that hides all the details of the correct deployment and configuration of security functions. To perform its tasks, the Policy Manager uses policy refinement techniques. © 2015 IEEE.
@InProceedings{2015NetSoft,
author = {Cataldo Basile and Antonio Lioy and Christian Pitscheider and Fulvio Valenza and Marco Vallini},
booktitle = {Proceedings of the 1st {IEEE} Conference on Network Softwarization (NetSoft 2015)},
doi = {10.1109/NETSOFT.2015.7116152},
pages = {1--5},
publisher = {{IEEE}},
title = {A novel approach for integrating security policy enforcement with dynamic network virtualization},
year = {2015},
abstract={Network function virtualization (NFV) is a new networking paradigm that virtualizes single network functions. NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user's security requirements. This paper presents a first approach towards the integration of network and security policy management into the NFV framework. By adding to the NFV architecture a new software component, the Policy Manager, we provide NFV with an easy and effective way for users to specify their security requirements and a process that hides all the details of the correct deployment and configuration of security functions. To perform its tasks, the Policy Manager uses policy refinement techniques. © 2015 IEEE.},
keywords = {Policy Refinement, Security Automation},
url = {https://iris.polito.it/retrieve/handle/11583/2592157/426647/2015Netsoft_author.pdf},
}
Downloads: 19
{"_id":"jvYZtAZwj7ZnujHs9","bibbaseid":"basile-lioy-pitscheider-valenza-vallini-anovelapproachforintegratingsecuritypolicyenforcementwithdynamicnetworkvirtualization-2015","authorIDs":["anJrBcCdr4LzzWetx","mWi7vbetNGoNvxDZk","x5vNTEJ4s3raTsibp"],"author_short":["Basile, C.","Lioy, A.","Pitscheider, C.","Valenza, F.","Vallini, M."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"firstnames":["Cataldo"],"propositions":[],"lastnames":["Basile"],"suffixes":[]},{"firstnames":["Antonio"],"propositions":[],"lastnames":["Lioy"],"suffixes":[]},{"firstnames":["Christian"],"propositions":[],"lastnames":["Pitscheider"],"suffixes":[]},{"firstnames":["Fulvio"],"propositions":[],"lastnames":["Valenza"],"suffixes":[]},{"firstnames":["Marco"],"propositions":[],"lastnames":["Vallini"],"suffixes":[]}],"booktitle":"Proceedings of the 1st IEEE Conference on Network Softwarization (NetSoft 2015)","doi":"10.1109/NETSOFT.2015.7116152","pages":"1–5","publisher":"IEEE","title":"A novel approach for integrating security policy enforcement with dynamic network virtualization","year":"2015","abstract":"Network function virtualization (NFV) is a new networking paradigm that virtualizes single network functions. NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user's security requirements. This paper presents a first approach towards the integration of network and security policy management into the NFV framework. By adding to the NFV architecture a new software component, the Policy Manager, we provide NFV with an easy and effective way for users to specify their security requirements and a process that hides all the details of the correct deployment and configuration of security functions. To perform its tasks, the Policy Manager uses policy refinement techniques. © 2015 IEEE.","keywords":"Policy Refinement, Security Automation","url":"https://iris.polito.it/retrieve/handle/11583/2592157/426647/2015Netsoft_author.pdf","bibtex":"@InProceedings{2015NetSoft,\r\n author = {Cataldo Basile and Antonio Lioy and Christian Pitscheider and Fulvio Valenza and Marco Vallini},\r\n booktitle = {Proceedings of the 1st {IEEE} Conference on Network Softwarization (NetSoft 2015)},\r\n doi = {10.1109/NETSOFT.2015.7116152},\r\n pages = {1--5},\r\n publisher = {{IEEE}},\r\n title = {A novel approach for integrating security policy enforcement with dynamic network virtualization},\r\n year = {2015},\r\n abstract={Network function virtualization (NFV) is a new networking paradigm that virtualizes single network functions. NFV introduces several advantages compared to classical approaches, such as the dynamic provisioning of functionality or the implementation of scalable and reliable services (e.g., adding a new instance to support demands). NFV also allows the deployment of security controls, like firewalls or VPN gateways, as virtualized network functions. However, currently there is not an automatic way to select the security functions to enable and to configure the selected ones according to a set of user's security requirements. This paper presents a first approach towards the integration of network and security policy management into the NFV framework. By adding to the NFV architecture a new software component, the Policy Manager, we provide NFV with an easy and effective way for users to specify their security requirements and a process that hides all the details of the correct deployment and configuration of security functions. To perform its tasks, the Policy Manager uses policy refinement techniques. © 2015 IEEE.},\r\n keywords = {Policy Refinement, Security Automation},\r\n url = {https://iris.polito.it/retrieve/handle/11583/2592157/426647/2015Netsoft_author.pdf},\r\n}\r\n\r\n","author_short":["Basile, C.","Lioy, A.","Pitscheider, C.","Valenza, F.","Vallini, M."],"key":"2015NetSoft","id":"2015NetSoft","bibbaseid":"basile-lioy-pitscheider-valenza-vallini-anovelapproachforintegratingsecuritypolicyenforcementwithdynamicnetworkvirtualization-2015","role":"author","urls":{"Paper":"https://iris.polito.it/retrieve/handle/11583/2592157/426647/2015Netsoft_author.pdf"},"keyword":["Policy Refinement","Security Automation"],"metadata":{"authorlinks":{"valenza, f":"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2FFulvioValenza%2Fbibliography%2Fmain%2FValenza_bibliography.bib&commas=true","basile, c":"https://bibbase.org/service/mendeley/47be63fe-fca0-3f0f-a864-642602926c3f","valenza, f":"https://bibbase.org/service/mendeley/47be63fe-fca0-3f0f-a864-642602926c3f"}},"downloads":19},"bibtype":"inproceedings","biburl":"https://raw.githubusercontent.com/FulvioValenza/bibliography/main/Valenza_bibliography.bib","creationDate":"2021-01-16T10:07:49.762Z","downloads":19,"keywords":["policy refinement","security automation"],"search_terms":["novel","approach","integrating","security","policy","enforcement","dynamic","network","virtualization","basile","lioy","pitscheider","valenza","vallini"],"title":"A novel approach for integrating security policy enforcement with dynamic network virtualization","year":2015,"dataSources":["JbiX35GNqPCF3nids","csYhy47rJJgSM7jjJ"]}