@InProceedings{2020CYSARM,
  author    = {Bringhenti, D. and Marchetto, G. and Sisto, R. and Valenza, F.},
  booktitle = {Proceedings of the 2nd {AMC CCS} Workshop on Cyber-Security Arms Race (CYSARM 2020)},
  doi       = {10.1145/3411505.3418439},
  pages     = {25-30},
  title     = {Short Paper: Automatic Configuration for an Optimal Channel Protection in Virtualized Networks},
  year      = {2020},
  abstract  = {Data confidentiality, integrity and authentication are security properties which are often enforced with the generation of secure channels, such as Virtual Private Networks, over unreliable network infrastructures. Traditionally, the configuration of the systems responsible of encryption operations is performed manually. However, the advent of software-based paradigms, such as Software-Defined Networking and Network Functions Virtualization, has introduced new arms races. In particular, even though network management has become more flexible, the increased complexity of virtual networks is making manual operations unfeasible and leading to errors which open the path to a large number of cyber attacks. A possible solution consists in reaching a trade-off between flexibility and complexity, by automatizing the configuration of the channel protection systems through policy refinement. In view of these considerations, this paper proposes a preliminary study for an innovative methodology to automatically allocate and configure channel protection systems in virtualized networks. The proposed approach would be based on the formulation of a MaxSMT problem and it would be the first to combine automation, formal verification and optimality in a single technique. © 2020 ACM.},
  keywords  = {VPN, Policy Refinement},
  url       = {https://iris.polito.it/retrieve/handle/11583/2844334/426885/2020_CYSARM_author.pdf},
}

{"_id":"QmdcpznusnKK8GtvF","bibbaseid":"bringhenti-marchetto-sisto-valenza-shortpaperautomaticconfigurationforanoptimalchannelprotectioninvirtualizednetworks-2020","authorIDs":["anJrBcCdr4LzzWetx"],"author_short":["Bringhenti, D.","Marchetto, G.","Sisto, R.","Valenza, F."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"propositions":[],"lastnames":["Bringhenti"],"firstnames":["D."],"suffixes":[]},{"propositions":[],"lastnames":["Marchetto"],"firstnames":["G."],"suffixes":[]},{"propositions":[],"lastnames":["Sisto"],"firstnames":["R."],"suffixes":[]},{"propositions":[],"lastnames":["Valenza"],"firstnames":["F."],"suffixes":[]}],"booktitle":"Proceedings of the 2nd AMC CCS Workshop on Cyber-Security Arms Race (CYSARM 2020)","doi":"10.1145/3411505.3418439","pages":"25-30","title":"Short Paper: Automatic Configuration for an Optimal Channel Protection in Virtualized Networks","year":"2020","abstract":"Data confidentiality, integrity and authentication are security properties which are often enforced with the generation of secure channels, such as Virtual Private Networks, over unreliable network infrastructures. Traditionally, the configuration of the systems responsible of encryption operations is performed manually. However, the advent of software-based paradigms, such as Software-Defined Networking and Network Functions Virtualization, has introduced new arms races. In particular, even though network management has become more flexible, the increased complexity of virtual networks is making manual operations unfeasible and leading to errors which open the path to a large number of cyber attacks. A possible solution consists in reaching a trade-off between flexibility and complexity, by automatizing the configuration of the channel protection systems through policy refinement. In view of these considerations, this paper proposes a preliminary study for an innovative methodology to automatically allocate and configure channel protection systems in virtualized networks. The proposed approach would be based on the formulation of a MaxSMT problem and it would be the first to combine automation, formal verification and optimality in a single technique. © 2020 ACM.","keywords":"VPN, Policy Refinement","url":"https://iris.polito.it/retrieve/handle/11583/2844334/426885/2020_CYSARM_author.pdf","bibtex":"@InProceedings{2020CYSARM,\r\n author = {Bringhenti, D. and Marchetto, G. and Sisto, R. and Valenza, F.},\r\n booktitle = {Proceedings of the 2nd {AMC CCS} Workshop on Cyber-Security Arms Race (CYSARM 2020)},\r\n doi = {10.1145/3411505.3418439},\r\n pages = {25-30},\r\n title = {Short Paper: Automatic Configuration for an Optimal Channel Protection in Virtualized Networks},\r\n year = {2020},\r\n abstract = {Data confidentiality, integrity and authentication are security properties which are often enforced with the generation of secure channels, such as Virtual Private Networks, over unreliable network infrastructures. Traditionally, the configuration of the systems responsible of encryption operations is performed manually. However, the advent of software-based paradigms, such as Software-Defined Networking and Network Functions Virtualization, has introduced new arms races. In particular, even though network management has become more flexible, the increased complexity of virtual networks is making manual operations unfeasible and leading to errors which open the path to a large number of cyber attacks. A possible solution consists in reaching a trade-off between flexibility and complexity, by automatizing the configuration of the channel protection systems through policy refinement. In view of these considerations, this paper proposes a preliminary study for an innovative methodology to automatically allocate and configure channel protection systems in virtualized networks. The proposed approach would be based on the formulation of a MaxSMT problem and it would be the first to combine automation, formal verification and optimality in a single technique. © 2020 ACM.},\r\n keywords = {VPN, Policy Refinement},\r\n url = {https://iris.polito.it/retrieve/handle/11583/2844334/426885/2020_CYSARM_author.pdf},\r\n}\r\n\r\n","author_short":["Bringhenti, D.","Marchetto, G.","Sisto, R.","Valenza, F."],"key":"2020CYSARM","id":"2020CYSARM","bibbaseid":"bringhenti-marchetto-sisto-valenza-shortpaperautomaticconfigurationforanoptimalchannelprotectioninvirtualizednetworks-2020","role":"author","urls":{"Paper":"https://iris.polito.it/retrieve/handle/11583/2844334/426885/2020_CYSARM_author.pdf"},"keyword":["VPN","Policy Refinement"],"metadata":{"authorlinks":{"valenza, f":"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2FFulvioValenza%2Fbibliography%2Fmain%2FValenza_bibliography.bib&commas=true"}},"downloads":8},"bibtype":"inproceedings","biburl":"https://raw.githubusercontent.com/FulvioValenza/bibliography/main/Valenza_bibliography.bib","creationDate":"2021-01-28T15:09:41.968Z","downloads":8,"keywords":["vpn","policy refinement"],"search_terms":["short","paper","automatic","configuration","optimal","channel","protection","virtualized","networks","bringhenti","marchetto","sisto","valenza"],"title":"Short Paper: Automatic Configuration for an Optimal Channel Protection in Virtualized Networks","year":2020,"dataSources":["JbiX35GNqPCF3nids","oHcDH9GXBbkp4t9gm","csYhy47rJJgSM7jjJ","hZL94qE5m3pMWuJwA","8EGSmY4udryikjQyX","nMy6C9RcR4TJMDbmB","Ka2S54TRk8na4h8uK","qgD6ZecrgthN9jyS8","yf5ybPwJxfS5zDTx9","8iJ7pScsBCJNMEwBL","XZnEt8kdXurbtCWoc","R3zwdw7JArkWqNexb"]}